vet

Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run to scan an Agent Skill hosted in a GitHub repository...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: gpu-operator, rancher-agent, rancher, podman, nvidia-container-toolkit, sriov-network-device-plugin, buildah-fips, nvidia-container-toolkit-fips, node-feature-discovery, sriov-network-device-plugin-fips, podman-fips, cadvisor, buildah, k8s-device-plugin-fips,...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: kubedock, cri-tools, trivy-operator, trivy-operator-fips, harvester-fips, docker-credential-gcr-fips, datadog-agent, nerdctl-fips, rancher-machine, rancher-agent, rancher, spire-server-fips, vault, podman, docker-credential-gcr, beats, docker-compose-fips,...

GO-2024-2824 vulnerabilities

Vulnerabilities for packages: kube-bench, mongo-tools, caddy-fips, ip-masq-agent, opentelemetry-collector-contrib-fips, dockerize, helm-operator-fips, guac, wave-fips, flux-notification-controller, kustomize, caddy, extism, step-fips, trust-manager, trust-manager-fips, croc, s5cmd, dive,...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: howdy-yall, influx, net-kourier, cni-plugins, newrelic-nri-statsd, nats-top, nri-f5, container-object-storage-interface, pvc-autoresizer, gitaly, renovate, grafana-operator, xcover, mattermost, fuse-overlayfs-snapshotter, buf, opencost, prometheus-operator, mage,...

GO-2026-4870 vulnerabilities

Vulnerabilities for packages: db-operator, witness, s5cmd, node-problem-detector, buf, dockerize, kubernetes-dashboard-metrics-scraper, tkn, k8sgpt-operator, kubernetes-replicator, fluxcd-kustomize-mutating-webhook, rancher-fleet, wuzz, libnvidia-container, nri-kafka, step-kms-plugin,...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: gitlab-runner, terragrunt, cloudflared, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, skaffold, witness, crossplane-provider-aws-sqs, prometheus-operator, gitlab-pages, spire-server, tkn, pulumi-kubernetes-operator, zarf, prometheus,...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Checker A portable Bash script to detect vulne...

Linux Distros Unpatched Vulnerability : CVE-2024-1724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu,...

Linux Distros Unpatched Vulnerability : CVE-2010-3836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server cra...

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

The npm registry for the Node.js JavaScript runtime environment is susceptible to what's called a manifest confusion attack that could potentially allow threat actors to conceal malware in project dependencies or perform arbitrary script execution during installation. "A npm package's manifest is...

RHEL 7 : rh-nodejs10-nodejs (RHSA-2020:0597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0597 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package

Impact Running GuardDog against a specially-crafted package can allow an attacker to write an arbitrary file on the machine where GuardDog is executed. This is due to a path traversal vulnerability when extracting the .tar.gz file of the package being scanned, which exists by design in the...

Salt Open Linux Vulnerability Scanner: Salt Scanner

Salt Open Linux Vulnerability Scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications. Requirements Salt Open salt-master, salt-minion¹ Python 2.7 Salt pip install salt==2016.11.5 Slackclient pip install slackclient==1.0.5 Usage root@localhost pyth...