vet

クイックスタート • ドキュメント • コミュニティ !NOTE vet はエージェントスキルの特別モードをサポートしています。 GitHub リポジトリでホストされているエージェントスキルをスキャンするには、vet scan --agent-skill を実行してください。 vet を選ぶ理由 現代のソフトウェアの70～90%はオープンソースコードです — それが安全であるとどうやって確認しますか？ 従来のSCAツールはCVEのノイズで埋もれてしまいます。vet は異なるアプローチをとります： シャドウ AI 発見 — さまざまなツールや設定からAIツール使用のシグナルを発見...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit-fips, sriov-network-device-plugin, prometheus-podman-exporter, cadvisor-fips, buildah-fips, nvidia-container-toolkit, podman, gpu-operator-fips, rancher-agent, podman-fips, gpu-operator, node-feature-discovery-fips,...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: harvester, beats-fips, undock, docker-credential-gcr-fips, trivy, cri-tools, spire-server, aws-otel-collector, aws-otel-collector-fips, grafana, grafana-fips, elastic-agent, harvester-fips, cloudbeat, elastic-agent-fips, ko-fips, kots, upwind-agent,...

GO-2024-2824 vulnerabilities

Vulnerabilities for packages: tfsec, aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, tempo, gops, petname, tigera-operator, cass-operator-fips, harbor-scanner-trivy-fips, local-static-provisioner, helm-fips, kustomize, spark-operator, dynamic-localpv-provisioner, spegel, render-template,...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: vault-k8s, nri-f5, buf, prometheus, blobfuse2, dgraph, gitaly, grafana-operator, cni-plugins, gitleaks, http-echo, mattermost, telegraf, tetragon, mongo-tools, coredns, go, delve, nri-consul, newrelic-nri-statsd, gitlab-kas, tkn, gitlab-pages, hey,...

GO-2026-4870 vulnerabilities

Vulnerabilities for packages: incert, envoy-ratelimit, buf, timoni, local-path-provisioner, k3d, secrets-store-csi-driver, mailpit, chisel, temporal-ui-server, prometheus-operator, cluster-autoscaler, opentelemetry-operator, timescaledb-parallel-copy, kafka-proxy, nerdctl, bom,...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, podman, tekton-chains, crossplane-provider-aws-sns, buildah, docker-compose, gitea, crossplane-provider-aws-cloudfront, crossplane-provider-azure-managedidentity, telegraf, mattermost, opentofu, chisel, neuvector-sigstore-interface,...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Checker A portable Bash script to detect vulne...

Linux Distros Unpatched Vulnerability : CVE-2024-1724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu,...

Linux Distros Unpatched Vulnerability : CVE-2010-3836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server cra...

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

The npm registry for the Node.js JavaScript runtime environment is susceptible to what's called a manifest confusion attack that could potentially allow threat actors to conceal malware in project dependencies or perform arbitrary script execution during installation. "A npm package's manifest is...

RHEL 7 : rh-nodejs10-nodejs (RHSA-2020:0597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0597 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package

Impact Running GuardDog against a specially-crafted package can allow an attacker to write an arbitrary file on the machine where GuardDog is executed. This is due to a path traversal vulnerability when extracting the .tar.gz file of the package being scanned, which exists by design in the...

Salt Open Linux Vulnerability Scanner: Salt Scanner

Salt Open Linux Vulnerability Scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications. Requirements Salt Open salt-master, salt-minion¹ Python 2.7 Salt pip install salt==2016.11.5 Slackclient pip install slackclient==1.0.5 Usage root@localhost pyth...