GO-2025-3987 vulnerabilities

Vulnerabilities for packages: weaviate, hydra, hydra-fips...

GO-2025-3742 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: authentik, rancher-agent, azure-service-operator-fips, vault, cloudbeat, cloudbeat-fips, vault-fips, authentik-fips, azure-service-operator, rancher...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: cilium-fips, caddy, sbom-convert, vexctl, kargo, prometheus-node-exporter-fips, eck-operator, neuvector-dbgen-fips, go-md2man, gptscript, tfsec, configmap-reload-fips, crossplane-provider-aws-dynamodb, harbor-scanner-trivy-fips, wgcf, dataplaneapi-fips, etcd-fips,...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: spire-server, trivy-operator, grafana, nuclei, podman, cri-tools, grafana-alloy, rancher, docker-credential-gcr, zot, nerdctl, amazon-cloudwatch-agent-operator, skopeo, opentelemetry-operator, aws-otel-collector, envoy-gateway, kpt, portieris, trivy, datadog-agent,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: spire-server, trivy-operator, grafana, docker, melange, traefik, nuclei, newrelic-infrastructure-agent, neuvector-scanner, podman, cri-tools, grafana-alloy, gatekeeper, rancher, docker-credential-gcr, wolfictl, zarf, splunk-otel-collector, zot, openfga, apko,...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: kuma, terraform-provider-tls, kubernetes, cloudnative-pg, prometheus-pushgateway, nuclei, rabbitmq-cluster-operator, grafana-pyroscope, aactl, dbmate, migrate, redpanda, tekton-pipelines, splunk-otel-collector, zot, buildkitd, apko, argo-events,...

GO-2026-4337 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, gogatekeeper, ip-masq-agent, terraform-provider-tls, fluxcd-kustomize-mutating-webhook, terraform-provider-time, sonobuoy, prometheus-pushgateway, nuclei, flux-image-reflector-controller, terraform-provider-random, cue, vt-cli,...

CVE-2026-26974

Slyde is a program that creates animated presentations from XML. In versions 0.0.4 and below, Node.js automatically imports /.plugin.js,mjs files including those from nodemodules, so any malicious package with a .plugin.js file can execute arbitrary code when installed or required. All projects...

Exploit for Deserialization of Untrusted Data in Facebook React

Agentic Vulnerability Monitor POC An AI-powered, automated vu...

EUVD-2025-52295

Malicious code in resonant-amber-vole npm...

@ancademy/platform-sdk-client (>=1.1.1, <=1.1.4), @apollo/server-integration-testsuite (>=4.1.0, <=4.9.2) +31 more potentially affected by unknown CVE via @apollo/server (>=4.1.0, <=4.9.2)

@apollo/server NPM version =4.1.0, =1.1.1, =4.1.0, =0.0.1, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.3.0-rc.0, =0.2.0, =0.1.0-alpha.6, =0.1.18, =0.1.17, =0.2.0, =0.1.17, =0.2.0, =0.2.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

Fedora 19 : lynis-1.3.6-1.fc19 (2013-22768)

1.3.6 2013-12-03 New : - Support for the dntpd time daemon - New Apache test for modules HTTP-6632 - Apache test for modevasive HTTP-6640 - Apache test for modqos HTTP-6641 - Apache test for modspamhaus HTTP-6642 - Apache test for ModSecurity HTTP-6643 - Check for installed package audit tool...