Argus-SAF

Argus-SAF: Argus static analysis framework This is official reporitory for the Argus-SAF. For test and play with Argus-SAF, you can fork from our Argus-SAF-playground project, which have the basic setup for a Argus-SAF enhanced project with demo codes of how to perform different kind of analysis...

GHSA-XCX6-JX8P-X3H5 vulnerabilities

Vulnerabilities for packages: saf, redisinsight, dbgate-fips, azurite, librechat...

CVE-2026-109461 vulnerabilities

Vulnerabilities for packages: saf, redisinsight, dbgate-fips, azurite, librechat...

GHSA-C9RX-X947-FP3H vulnerabilities

Vulnerabilities for packages: saf, librechat...

CVE-2026-113650 vulnerabilities

Vulnerabilities for packages: saf, librechat...

CVE-2026-93749 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, saf, nextcloud-server, langfuse, rancher-api-ui, jupyter-base-notebook, vitess...

GHSA-68FV-2MGG-JV7Q vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, saf, nextcloud-server, langfuse, rancher-api-ui, jupyter-base-notebook, vitess...

GHSA-7Q85-XJ36-VMFC vulnerabilities

Vulnerabilities for packages: saf, sqlpad, redisinsight...

CVE-2026-77301 vulnerabilities

Vulnerabilities for packages: saf, sqlpad, redisinsight...

GHSA-7Q85-XJ36-VMFC vulnerabilities

Vulnerabilities for packages: sqlpad, saf...

CVE-2026-77301 vulnerabilities

Vulnerabilities for packages: sqlpad, saf...

CVE-2026-76845 vulnerabilities

Vulnerabilities for packages: renovate, sqlpad, saf...

GHSA-VWC7-R8MQ-G2X9 vulnerabilities

Vulnerabilities for packages: renovate, sqlpad, saf...

Malicious code in kapvino-saf-agada (npm)

Source: amazon-inspector 7b426931f3c2e13b977e6f9c04f187630d4c9290c938ce3e70e822c4f8dbf3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jurss-saf-as (npm)

Source: amazon-inspector e187e36ab5c95b25c8c22bd6da6d05104b8ecaa7d7e4992bb72b1a49eb36eae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

CVE-2026-82477

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...

CVE-2026-82477

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...

CVE-2026-82477

MITRE SAF Heimdall versions 2.11.6 through 2.13.x are affected by a Server-Side Request Forgery (SSRF) vulnerability in the Tenable proxy endpoint , specifically in apps/backend/src/tenable/tenable.controller.ts. A remote, unauthenticated attacker can leverage this flaw to access internal network...

CVE-2026-82477

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...

EUVD-2026-68115

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...