vet

Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: buildah, node-feature-discovery, podman-fips, prometheus-podman-exporter, gpu-operator-fips, podman, rancher, buildah-fips, rancher-agent, falco-no-driver, sriov-network-device-plugin-fips, nvidia-container-toolkit, nvidia-container-toolkit-fips, k8s-device-plugin,...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: buildah, harvester-fips, skopeo-fips, kubedock, rancher-machine, spire-server, kots, podman-fips, trivy-operator-fips, google-cloud-otel-ops-collector, cloudbeat-fips, commercial-grafana, undock, vault, portieris, podman, rancher, grafana-fips, ko,...

GO-2024-2824 vulnerabilities

Vulnerabilities for packages: helm, wireguard-go, hey, boring-registry-fips, kubernetes-csi-livenessprobe-fips, fulcio-fips, kubernetes-csi-livenessprobe, php-fpmexporter, flannel, prometheus-bind-exporter, crossplane-provider-aws, secrets-store-csi-driver-provider-gcp, conftest-fips,...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: karpenter, redpanda, xcover, prometheus-operator, influx, vault-env, opentelemetry-operator, coredns, knative-eventing, delve, prometheus, renovate, kubeflow-katib, buf, rancher-agent, grafana-operator, tetragon, nri-mssql, envoy-gateway, verticadb-operator,...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, cloudflared, policy-controller, src, minio, opentelemetry-collector, wal-g, crossplane-provider-azure-sql, crossplane-provider-aws-lambda, melange, step, vault-benchmark, gh, rancher-agent, crossplane-provider-aws-cloudfront, scorecard, k3s,...

GO-2026-4870 vulnerabilities

Vulnerabilities for packages: dbmate, git-sync, crossplane-provider-azure-sql, vault-benchmark, ip-masq-agent, step, extism, kyverno-policy-reporter-ui, lvm-driver, pdfcpu, terraform, grpc-health-probe, terraform-provider-pagerduty, whereabouts, cloud-provider-vsphere, filebrowser, harbor, nri-f5...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Checker A portable Bash script to detect vulne...

Linux Distros Unpatched Vulnerability : CVE-2024-1724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu,...

Linux Distros Unpatched Vulnerability : CVE-2010-3836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server cra...

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

The npm registry for the Node.js JavaScript runtime environment is susceptible to what's called a manifest confusion attack that could potentially allow threat actors to conceal malware in project dependencies or perform arbitrary script execution during installation. "A npm package's manifest is...

RHEL 7 : rh-nodejs10-nodejs (RHSA-2020:0597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0597 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package

Impact Running GuardDog against a specially-crafted package can allow an attacker to write an arbitrary file on the machine where GuardDog is executed. This is due to a path traversal vulnerability when extracting the .tar.gz file of the package being scanned, which exists by design in the...

Salt Open Linux Vulnerability Scanner: Salt Scanner

Salt Open Linux Vulnerability Scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications. Requirements Salt Open salt-master, salt-minion¹ Python 2.7 Salt pip install salt==2016.11.5 Slackclient pip install slackclient==1.0.5 Usage root@localhost pyth...