630130 matches found
GHSA-P9F8-WVJ8-2FG8 OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation
Summary The OpenTelemetry Go SDK trace package can fail to enforce AttributeValueLengthLimit for string attributes containing the valid Unicode replacement character U+FFFD. An oversized attacker-controlled attribute value that includes U+FFFD is returned untruncated, bypassing the configured...
Malicious Package
Overview items-validator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview rai6jaisahthaghee5ou-loader-package is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...
Malicious Package
Overview express-javascript is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
ROOT-APP-GOBINARY-CVE-2025-58181 CVE-2025-58181 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2025-58181 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44290 CVE-2026-44290 in protobufjs - Patched by Root
Root has patched CVE-2026-44290 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-45740 CVE-2026-45740 in protobufjs - Patched by Root
Root has patched CVE-2026-45740 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44288 CVE-2026-44288 in protobufjs - Patched by Root
Root has patched CVE-2026-44288 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-59877 CVE-2026-59877 in protobufjs - Patched by Root
Root has patched CVE-2026-59877 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44289 CVE-2026-44289 in protobufjs - Patched by Root
Root has patched CVE-2026-44289 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-60005 CVE-2026-60005 in nginx - Patched by Root
Root has patched CVE-2026-60005 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2024-43374 CVE-2024-43374 in vim - Patched by Root
Root has patched CVE-2024-43374 in the vim package for Root:Alpine:3.18. Multiple fixed versions available...
Important: Red Hat Security Advisory: Helm CLI for Red Hat OpenShift v4.3.0 release
General availability release of Helm CLI for Red Hat OpenShift v4.3.0. Helm is the package manager for Kubernetes, used to define, install, and upgrade applications as reusable charts. This release delivers the Helm CLI for Red Hat OpenShift v4.3.0 binaries built and distributed by Red Hat...
ROOT-OS-ALPINE-318-CVE-2023-51384 CVE-2023-51384 in openssh - Patched by Root
Root has patched CVE-2023-51384 in the openssh package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2024-8376 CVE-2024-8376 in mosquitto - Patched by Root
Root has patched CVE-2024-8376 in the mosquitto package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-41672 CVE-2026-41672 in @xmldom/xmldom - Patched by Root
Root has patched CVE-2026-41672 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-41673 CVE-2026-41673 in @xmldom/xmldom - Patched by Root
Root has patched CVE-2026-41673 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-28390 CVE-2026-28390 in openssl - Patched by Root
Root has patched CVE-2026-28390 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...