vet

クイックスタート • ドキュメント • コミュニティ !NOTE vet はエージェントスキルの特別モードをサポートしています。 GitHub リポジトリでホストされているエージェントスキルをスキャンするには、vet scan --agent-skill を実行してください。 vet を選ぶ理由 現代のソフトウェアの70～90%はオープンソースコードです — それが安全であるとどうやって確認しますか？ 従来のSCAツールはCVEのノイズで埋もれてしまいます。vet は異なるアプローチをとります： シャドウ AI 発見 — さまざまなツールや設定からAIツール使用のシグナルを発見...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: cadvisor, gpu-operator-fips, cadvisor-fips, node-feature-discovery-fips, k8s-device-plugin, buildah, podman-fips, rancher-agent, nvidia-container-toolkit-fips, prometheus-podman-exporter, buildah-fips, node-feature-discovery, sriov-network-device-plugin,...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: skopeo, docker-credential-gcr-fips, cloudbeat, harvester, opentelemetry-operator-fips, aws-otel-collector, zot, amazon-cloudwatch-agent-operator, grafana, undock, buildah, rancher, elastic-agent-fips, podman-fips, chainloop-control-plane, kpt, nerdctl,...

GO-2024-2824 vulnerabilities

Vulnerabilities for packages: cadvisor, prometheus-stackdriver-exporter, karpenter, kube-bench-fips, lazygit, fulcio-fips, atlantis-fips, actions-runner-controller-fips, crane, k3d, step-fips, atlantis, trust-manager-fips, cert-manager-webhook-pdns, metrics-server-fips, src-fingerprint, guac,...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: renovate, mattermost, cni-plugins, datadog-agent, vault-k8s, argo-cd, rancher-agent, secrets-store-csi-driver-provider-azure, blobfuse2, coredns, grafana-operator, nri-f5, karpenter, aws-application-networking-k8s, influx, gofumpt, howdy-yall, redka,...

GO-2026-4870 vulnerabilities

Vulnerabilities for packages: vault-benchmark, vale, mattermost, newrelic-k8s-metadata-injection, filebrowser, rook, vendir, argo-cd, kwok, secrets-store-csi-driver-provider-azure, trivy-operator, kyverno-notation-aws, aws-privateca-issuer, rabbitmq-default-user-credential-updater, controller-gen...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: vault-benchmark, zot, crossplane-provider-aws-eks, mattermost, wolfictl, argo-cd, crossplane-provider-family-azure, guac, crossplane-provider-aws-route53, trivy-operator, crossplane-provider-aws-dynamodb, hcloud, containerd, atlantis,...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Checker A portable Bash script to detect vulne...

Linux Distros Unpatched Vulnerability : CVE-2024-1724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu,...

Linux Distros Unpatched Vulnerability : CVE-2010-3836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server cra...

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

The npm registry for the Node.js JavaScript runtime environment is susceptible to what's called a manifest confusion attack that could potentially allow threat actors to conceal malware in project dependencies or perform arbitrary script execution during installation. "A npm package's manifest is...

RHEL 7 : rh-nodejs10-nodejs (RHSA-2020:0597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0597 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package

Impact Running GuardDog against a specially-crafted package can allow an attacker to write an arbitrary file on the machine where GuardDog is executed. This is due to a path traversal vulnerability when extracting the .tar.gz file of the package being scanned, which exists by design in the...

Salt Open Linux Vulnerability Scanner: Salt Scanner

Salt Open Linux Vulnerability Scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications. Requirements Salt Open salt-master, salt-minion¹ Python 2.7 Salt pip install salt==2016.11.5 Slackclient pip install slackclient==1.0.5 Usage root@localhost pyth...