1550 matches found
GO-2025-3848 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GO-2024-2899 vulnerabilities
Vulnerabilities for packages: melange, pombump...
GO-2026-5337 vulnerabilities
Vulnerabilities for packages: kyverno, kyverno-notation-aws...
GO-2026-4753 vulnerabilities
Vulnerabilities for packages: dex, rancher, teleport, mattermost, rancher-agent...
GO-2024-2948 vulnerabilities
Vulnerabilities for packages: terragrunt, grype, wolfictl, zot, kubescape, conftest, zarf, tfsec, trivy, k9s, kots, snyk-cli, tflint, terraform...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...
GO-2026-5235 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...
GO-2024-2609 vulnerabilities
Vulnerabilities for packages: kaf, k3d, q, kind, cri-tools, nri-apache, ytt, nri-redis, stakater-reloader, temporal-ui-server, render-template, kuberay-operator, ferretdb, shfmt, dive, kubeflow-pipelines, petname, flux-helm-controller, wazero, aws-flb-cloudwatch, bom, gobuster, memcached-exporter...
GO-2026-5074 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, kubevela, cerbos, apko, argocd-image-updater, act, guac, kubescape, teleport, zarf, external-secrets-operator, snyk-cli, dagger, skaffold, gomplate, kaniko, gptscript, witness, pulumi-language-yaml, pulumi-kubernetes-operator, trivy,...
GO-2026-4871 vulnerabilities
Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubernetes-ingress-defaultbackend, certificate-transparency, vale, kubescape, kind, incert, sigstore-scaffolding, fzf, git-credential-oauth, sftpgo-plugin-eventstore, prometheus, sftpgo, weaviate, wazero, pgtimetable, age,...
GO-2026-4762 vulnerabilities
Vulnerabilities for packages: rabbitmq-messaging-topology-operator, certificate-transparency, grafana-pyroscope, kubescape, loki, sigstore-scaffolding, sftpgo-plugin-eventstore, hydra, prometheus, sftpgo, ferretdb, weaviate, k8sgateway, pulumi-language-dotnet, ratify, terraform-provider-azurerm,...
GO-2025-3754 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-storage, q, crossplane-provider-aws-memorydb, crossplane-provider-aws-sns, kubescape, crossplane-provider-aws-cloudfront, crossplane-provider-azure-authorization, falcoctl, hydra, extism, pulumi-language-dotnet,...
GO-2024-2887 vulnerabilities
Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubernetes-ingress-defaultbackend, certificate-transparency, kubescape, kind, sigstore-scaffolding, ferretdb, weaviate, wazero, pulumi-language-dotnet, age, terraform-provider-azurerm, fluent-operator,...
GO-2024-2963 vulnerabilities
Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubernetes-ingress-defaultbackend, certificate-transparency, kind, fzf, ferretdb, weaviate, wazero, pulumi-language-dotnet, age, terraform-provider-azurerm, cert-manager-cmctl, fluent-operator, kubernetes-csi-driver-hostpath...
CVE-2026-73420 vulnerabilities
Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, langfuse...
CLEANSTART-2026-FH61032 Security fixes in metrics-server 0.8.1-r2
Package metrics-server version 0.8.1-r2 fixes 13 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-42154, ghsa-8rm2-7qqf-34qm...
DEBIAN-CVE-2026-68398
In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tprecv runs in the L2TP UDP-encap softirq RX path: l2tpudpencaprecv - l2tprecvcommon - pppol2tprecv - pppinput&po-chan It runs under rcureadlock holding...
Malicious code in ventrix-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b68f964850d0777c1f3993c52e3b66dc425b02ee82fb33bcd958514f730926 [email protected] ships a loader that, when the package's default getPlugin export is invoked, performs an HTTP request to the hardcoded endpoint...
MAL-2026-11706 Malicious code in @or-sdk/library (npm)
npm/@or-sdk/library is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...