Malicious Package

Overview asdk-plugin-ai-platform is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

nono v0.71.0

Built by the team that brought you Sigstore The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central !NOTE In the lead-up to a 1.0 release, APIs are stabilizing. API changes may still occur where necessary, but will be kept to a minimum. !IMPORTANT Organization...

CVE-2026-45330 Decidim: Verification admins can access supplied IDs from other organisations

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-document verification admin controllers load pending Authorization records by raw identifier without confirming currentorganization ownership, allowing an...

GHSA-CHX6-HX7R-MCP5 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

GHSA-4X4J-2G7C-83W6 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

GHSA-9HW9-CH79-4VH6 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-JJJ6-MW9F-P565 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

GHSA-659M-PX2C-25WJ vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

GHSA-337J-9HXR-RHXG vulnerabilities

Vulnerabilities for packages: keycloak, vitess, librechat...

GHSA-MQ64-J8F9-9GCJ vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-activemq, camunda-zeebe, apache-activemq-fips, apache-nifi-registry, kafbat-ui-fips, camunda...

yakit v1.4.8-0731

YAKIT-A Cyber Security ALL-IN-ONE Platform based on Yak language Whitepaper • Official documentation • Issue feedback • Official website • Community • Architecture :book:Language： English • 中文 Introduction Security integration is a reform of security operations and management for enterprises in t...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

EUVD-2026-51556

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-18141

The CVE-2026-18141 entry concerns aap-gateway in Ansible Automation Platform’s Event-Driven Ansible (EDA). Affected component: aap-gateway. Vulnerability: an unauthenticated remote attacker can bypass mutual TLS on event streams by manipulating the event stream URL and forging the HTTP Subject he...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.67 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.67 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

server v1.0.0-rc4

Hashtopolis Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...