194861 matches found
CVE-2026-7262 vulnerabilities
Vulnerabilities for packages: php...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: goreleaser, witness, nfpm, argo-events, pulumi-kubernetes-operator, gitea, kubescape, steampipe, src-fingerprint, argo-cd, xeol, apko, rancher-fleet, guac, osv-scanner, melange, argocd-image-updater, tfsec, trufflehog, crossplane, gptscript, trivy-operator, bom,...
CVE-2026-8328 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-7258 vulnerabilities
Vulnerabilities for packages: php...
GHSA-J989-FGGP-QGP5 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-7259 vulnerabilities
Vulnerabilities for packages: php...
CVE-2026-6665 vulnerabilities
Vulnerabilities for packages: pgbouncer...
Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft
In this article 1. Attack chain overview 1. Technical analysis 2. How GitHub took action to prevent further harm 2. Mitigation and protection guidance 1. Microsoft Defender XDR Detections 2. Microsoft Defender XDR Threat analytics 3. Advanced hunting 4. Indicators of Compromise IOC 3. References ...
Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft
In this article 1. Attack chain overview 1. Technical analysis 2. How GitHub took action to prevent further harm 2. Mitigation and protection guidance 1. Microsoft Defender XDR Detections 2. Microsoft Defender XDR Threat analytics 3. Advanced hunting 4. Indicators of Compromise IOC 3. References ...
MAL-2026-4220 Malicious code in web3-secrets-detector (npm)
A coordinated supply-chain attack comprising 10 npm packages published by maintainer ddjidd5640 [email protected] within a 48-hour window 2026-05-19T03:55Z – 2026-05-21T04:31Z. All packages masquerade as legitimate Web3/DeFi developer security tools MCP servers while silently exfiltrating...
Malicious code in web3-secrets-detector (npm)
A coordinated supply-chain attack comprising 10 npm packages published by maintainer ddjidd5640 [email protected] within a 48-hour window 2026-05-19T03:55Z – 2026-05-21T04:31Z. All packages masquerade as legitimate Web3/DeFi developer security tools MCP servers while silently exfiltrating...
RHSA-2026:19106 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:15856 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
GHSA-XM7R-268R-WW34 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-8572 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2GJ8-F8HJ-PWWH vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-8555 vulnerabilities
Vulnerabilities for packages: chromium...
Malicious code in @tailwind-core/webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7955094460738dc65288f88a3bb990c7d3ff52ed3683f11265b7072bd80aa4e3 Package @tailwind-core/webpack impersonates the legitimate Tailwind v4 webpack loader @tailwindcss/webpack. The README copies Tailwind Labs branding ...
PT-2026-42206
Name of the Vulnerable Software and Affected Versions @cap-js/sqlite version 2.2.2 @cap-js/postgres version 2.2.2 @cap-js/db-service version 2.10.1 Description Compromised versions of these packages were published to harvest credentials and attempt self-propagation. If installed, any credentials...
Fedora 45 : ansible / ansible-core (2026-a8a5f6b41b)
The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-a8a5f6b41b advisory. Latest Ansible 13 - Close bogus CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...