GHSA-9HJ4-R449-HFVC vulnerabilities

Vulnerabilities for packages: pact-broker-docker, cinc-auditor, ruby3.2-rails, logstash-fips, pact-broker-docker-fips, ruby3.3-rails, ruby3.4-rails...

CVE-2026-71847 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, cinc-auditor, ruby3.2-rails, logstash-fips, pact-broker-docker-fips, ruby3.3-rails, ruby3.4-rails...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, kube-logging-operator, logstash-fips, ruby4.0-rails, pact-broker-docker-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, logstash...

GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, kube-logging-operator, logstash-fips, ruby4.0-rails, pact-broker-docker-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, logstash...

GHSA-8678-W3JW-XFC2 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, kube-logging-operator, logstash-fips, ruby4.0-rails, pact-broker-docker-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, logstash...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, kube-logging-operator, logstash-fips, ruby4.0-rails, pact-broker-docker-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, logstash...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, kube-logging-operator, logstash-fips, ruby4.0-rails, pact-broker-docker-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, logstash...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, kube-logging-operator, logstash-fips, ruby4.0-rails, pact-broker-docker-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, logstash...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, kube-logging-operator, logstash-fips, ruby4.0-rails, pact-broker-docker-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, logstash...

GHSA-5PRR-V3J2-97MH vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, kube-logging-operator, logstash-fips, ruby4.0-rails, pact-broker-docker-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, logstash...

Malicious code in autotel-pact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3afdb0cdd411bf4c5c61858c6eac81b3a321fad31613a01d8e1ba80c9a6642 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5226 Malicious code in autotel-pact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3afdb0cdd411bf4c5c61858c6eac81b3a321fad31613a01d8e1ba80c9a6642 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

A week in security (April 7 – April 13)

Last week on Malwarebytes Labs: The Pall Mall Pact and why it matters Child predators are lurking on dating apps, warns report Your 23andMe genetic data could be bought by China, senator warns WhatsApp for Windows vulnerable to attacks. Update now! Man accused of using keylogger to spy on...

The Pall Mall Pact and why it matters

The US State Department reportedly plans to sign an international agreement designed to govern the use of commercial spyware known as the Pall Mall Pact. The Pall Mall Pact, formally known as the Pall Mall Process, was initiated by France and the United Kingdom in February 2024. The goal of the...

Fedora: Security Advisory for golang-github-pact-foundation (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-pact-foundation-1.5.1-7.fc36

Pact Go enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for t he service provider project...

Fedora: Security Advisory for golang-github-pact-foundation (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-pact-foundation-1.5.1-6.fc35

Pact Go enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for t he service provider project...

Fedora: Security Advisory for golang-github-pact-foundation (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...