Malicious Package

Overview -espanol-john-wick-keanu-reeves-4-k-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apicurio-registry, floci, apache-hop, apicurio-registry-fips, neo4j, knative-kafka-broker, pinot-fips, request-9047-keycloak-fips, management-api-for-apache-cassandra-5.0, zipkin, apache-activemq-artemis, keycloak-fips, knative-kafka-broker-fips, apache-pulsar-fips,...

CVE-2026-59919 vulnerabilities

Vulnerabilities for packages: apicurio-registry, floci, apache-hop, apicurio-registry-fips, neo4j, knative-kafka-broker, pinot-fips, request-9047-keycloak-fips, management-api-for-apache-cassandra-5.0, zipkin, apache-activemq-artemis, keycloak-fips, knative-kafka-broker-fips, apache-pulsar-fips,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apicurio-registry, floci, apache-hop, apicurio-registry-fips, neo4j, knative-kafka-broker, pinot-fips, request-9047-keycloak-fips, management-api-for-apache-cassandra-5.0, zipkin, apache-activemq-artemis, keycloak-fips, knative-kafka-broker-fips, apache-pulsar-fips,...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apicurio-registry, floci, apache-hop, apicurio-registry-fips, neo4j, knative-kafka-broker, pinot-fips, request-9047-keycloak-fips, management-api-for-apache-cassandra-5.0, zipkin, apache-activemq-artemis, keycloak-fips, knative-kafka-broker-fips, apache-pulsar-fips,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: zipkin, tez, apache-activemq-artemis, thingsboard, apicurio-registry, management-api-for-apache-cassandra-5.0, neo4j, apache-pulsar, celeborn...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: wavefront-proxy, infinispan, cloudwatch-exporter, flyway, tez, apache-activemq-artemis, thingsboard, apicurio-registry, akhq, apache-nifi, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, apache-pulsar...

GHSA-6JQX-86GH-F27W vulnerabilities

Vulnerabilities for packages: wavefront-proxy, infinispan, cloudwatch-exporter, flyway, tez, apache-activemq-artemis, thingsboard, apicurio-registry, akhq, apache-nifi, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, apache-pulsar...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: wavefront-proxy, infinispan, cloudwatch-exporter, flyway, tez, apache-activemq-artemis, thingsboard, apicurio-registry, akhq, apache-nifi, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, apache-pulsar...

GHSA-6CQP-G7GG-8HR5 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, infinispan, cloudwatch-exporter, flyway, tez, apache-activemq-artemis, thingsboard, apicurio-registry, akhq, apache-nifi, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, apache-pulsar...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, infinispan, cloudwatch-exporter, flyway, tez, apache-activemq-artemis, thingsboard, apicurio-registry, akhq, apache-nifi, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, apache-pulsar...

CVE-2026-55831 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, infinispan, cloudwatch-exporter, flyway, tez, apache-activemq-artemis, thingsboard, apicurio-registry, akhq, apache-nifi, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, apache-pulsar...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: zipkin, tez, apache-activemq-artemis, thingsboard, apicurio-registry, management-api-for-apache-cassandra-5.0, neo4j, apache-pulsar, celeborn...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, infinispan, cloudwatch-exporter, flyway, tez, apache-activemq-artemis, thingsboard, apicurio-registry, akhq, apache-nifi, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, apache-pulsar...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, infinispan, cloudwatch-exporter, flyway, tez, apache-activemq-artemis, thingsboard, apicurio-registry, akhq, apache-nifi, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, apache-pulsar...

CVE-2026-59919 vulnerabilities

Vulnerabilities for packages: zipkin, tez, apache-activemq-artemis, thingsboard, apicurio-registry, management-api-for-apache-cassandra-5.0, neo4j, apache-pulsar, celeborn...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: zipkin, tez, apache-activemq-artemis, thingsboard, apicurio-registry, management-api-for-apache-cassandra-5.0, neo4j, apache-pulsar, celeborn...

GO-2026-5884 ORAS Go forwards registry credentials across registry redirects in oras.land/oras-go

ORAS Go forwards registry credentials across registry redirects in oras.land/oras-go...

GO-2026-5885 Oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens in oras.land/oras-go

Oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens in oras.land/oras-go...

CVE-2026-54422

A flaw was found in OpenStack ironic-python-agent's bootc container deployment support. During bootc image deployment, the OCI registry pull secret was exposed to tenant-controlled container code running with host PID namespace visibility. A malicious bootc container image could read the operator...