178403 matches found
MAL-2026-14121 Malicious code in sui-move-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760bce82610adadda6538b9ab04627b71b66c3816fe63f8e1a8f629ce4b4aaf4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-64849
creationtimestamp| type| source ---|---|--- 2026-08-17 22:35:08+00:00| published-proof-of-concept| https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j 2026-08-17 23:01:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcsnmaylb27 2026-08-17...
CVE-2026-69146
creationtimestamp| type| source ---|---|--- 2026-08-17 22:35:05+00:00| published-proof-of-concept| https://github.com/mlflow/mlflow/security/advisories/GHSA-3p64-6gvh-82v5 2026-08-17 23:31:40+00:00| seen| https://gist.github.com/alon710/bb0c1f0112166e936833a909d435a77a 2026-08-18 00:01:16+00:00|...
atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)
The HTTP MCP server-registry backend factory atomicagents/mcpregistry/http.py, makehttpmcpserverregistrybackendfromurl accepts both http and https schemes. Catalog entries carry command/args that are type-validated but content-unrestricted, and are later spawned as local stdio subprocesses by...
CVE-2026-54428 vulnerabilities
Vulnerabilities for packages: sonarqube, nrjmx, akhq, opensearch, thingsboard, apicurio-registry, druid, cloudwatch-exporter, cassandra-reaper, logstash...
GHSA-V3JC-474W-2WM6 vulnerabilities
Vulnerabilities for packages: sonarqube, nrjmx, akhq, opensearch, thingsboard, apicurio-registry, druid, cloudwatch-exporter, cassandra-reaper, logstash...
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: ctop, flux, juicefs-csi-driver, dapr, vcluster, harbor, logstash-exporter, fscrypt, docker-machine-driver-harvester, pulumi-language-yaml, witness, spiffe-helper, smokescreen, git-lfs, crossplane-provider-aws-kinesis, kserve-rest-proxy, kubernetes-dashboard-api,...
GO-2023-1589 vulnerabilities
Vulnerabilities for packages: zot...
GO-2025-3607 vulnerabilities
Vulnerabilities for packages: tailscale, harbor-fips, harbor, zitadel...
GO-2024-2958 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy-fips, harbor-scanner-trivy, zot...
GO-2025-3585 vulnerabilities
Vulnerabilities for packages: harbor-fips, harbor...
GO-2024-2454 vulnerabilities
Vulnerabilities for packages: boring-registry, falcoctl-fips, spire-server, minio, vexctl, mc, tekton-chains, spire-server-fips, falcoctl, gitsign, cosign-fips, external-secrets-fips, kubescape...
GO-2024-2632 vulnerabilities
Vulnerabilities for packages: boring-registry, falcoctl-fips, mc-fips, spire-server, minio, mc, boring-registry-fips, spire-server-fips, falcoctl, minio-fips, external-secrets-fips...
GO-2025-3900 vulnerabilities
Vulnerabilities for packages: ratify-fips, beats, k9s-fips, boring-registry-fips, kyverno, bank-vaults, kyverno-notation-aws-fips, tkn-fips, jitsucom-bulker, rancher-security-scan, gitlab-cng-fips, neuvector-sigstore-interface-fips, pluto-fips, gitlab-cng, mattermost-fips, zitadel, istio-fips,...
GO-2025-3720 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argo-cd, argocd-image-updater-fips...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: falcoctl-fips, oauth2-proxy, slsa-verifier, tekton-chains, spire-server-fips, cloudflared, timestamp-authority-fips, bank-vaults-fips, vexctl, cosign, tkn, kubescape, aactl, gitsign, cosign-fips, argo-workflows, kots, rekor, terragrunt, flux-source-controller,...
GO-2026-4980 vulnerabilities
Vulnerabilities for packages: aws-flb-firehose-fips, kubernetes-csi-driver-nfs-fips, crossplane-provider-aws-vpc-fips, dex-k8s-authenticator, oauth2-proxy-fips, smarter-device-manager-fips, crossplane-provider-gitlab-fips, libnvidia-container, kubo-fips, gatekeeper,...
GO-2025-3409 vulnerabilities
Vulnerabilities for packages: zot...