1533 matches found
GO-2025-3754 vulnerabilities
Vulnerabilities for packages: gitsign, pulumi-language-java, vcluster, go-licenses, crossplane-provider-azure, trufflehog, crossplane-provider-aws-cloudfront, argo-workflows, caddy, kots, kubescape, gptscript, gomplate, crossplane-provider-aws-dynamodb, crossplane-provider-aws-sns, gitness,...
GO-2024-2887 vulnerabilities
Vulnerabilities for packages: nri-redis, argo-workflows, trivy, nri-haproxy, shfmt, scorecard, rabbitmq-cluster-operator, slsa-verifier, kaf, redka, ghaudit, tekton-chains, ksops, rclone, docker-credential-gcr, mkcert, mockery, ollama, kubernetes-ingress-defaultbackend, vault-k8s,...
GO-2024-2963 vulnerabilities
Vulnerabilities for packages: nri-redis, argo-workflows, nri-haproxy, shfmt, scorecard, rabbitmq-cluster-operator, slsa-verifier, kaf, dbmate, redka, ghaudit, tekton-chains, rclone, docker-credential-gcr, mkcert, mockery, minio, ollama, kubernetes-ingress-defaultbackend, vault-k8s,...
CVE-2026-73420 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse, langfuse-fips...
CLEANSTART-2026-FH61032 Security fixes in metrics-server 0.8.1-r2
Package metrics-server version 0.8.1-r2 fixes 13 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-42154, ghsa-8rm2-7qqf-34qm...
DEBIAN-CVE-2026-68398
In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tprecv runs in the L2TP UDP-encap softirq RX path: l2tpudpencaprecv - l2tprecvcommon - pppol2tprecv - pppinput&po-chan It runs under rcureadlock holding...
Malicious code in ventrix-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b68f964850d0777c1f3993c52e3b66dc425b02ee82fb33bcd958514f730926 [email protected] ships a loader that, when the package's default getPlugin export is invoked, performs an HTTP request to the hardcoded endpoint...
MAL-2026-11706 Malicious code in @or-sdk/library (npm)
npm/@or-sdk/library is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...
GHSA-8JC8-CVQJ-P926 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-runner, gitlab-rails-ce-fips...
MAL-2026-10901 Malicious code in solana-web3-lts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efd3d5cdcb8fb794a1702f586abd7018d86aad3e40286f5a43dd1127d804ed Package name 'solana-web3-lts' resembles the widely-used '@solana/web3.js' Solana SDK, raising name-confusion concerns for installers reaching for th...
RHSA-2026:37535 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
GHSA-28X5-J68M-FXR3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2W8Q-JWXQ-9MRG vulnerabilities
Vulnerabilities for packages: chromium...
Malicious code in polymarket-kelly-stake-math (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9798cce0effcbcf5ed3295f322a375bb1a3cbb7e9db4b7d88c802bf5116639e3 [email protected] advertises itself as a pure Kelly-stake math helper but its postinstall hook scripts/install-check.cjs, invoked fro...
Malicious code in ts-eslint-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1ffed26d2d64bf9076210504de22b87e27a065821dedbc708fb05f7c47db74 The package [email protected] presents as a TypeScript/ESLint/Jest helper but ships lib/collect.js, which imports childprocess and invokes...
MAL-2026-7404 Malicious code in rngularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7332 Malicious code in options-msg (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7305 Malicious code in jreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...