MAL-2026-11328 Malicious code in logform-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec6c47e9e94b571242404a22ce01e255dc1df012c3d13477b5d2db9a96a037c Package name 'logform-core' is one edit/suffix away from the widely-used 'logform' logging-format library, and the README advertises formatting...

Malicious code in logform-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec6c47e9e94b571242404a22ce01e255dc1df012c3d13477b5d2db9a96a037c Package name 'logform-core' is one edit/suffix away from the widely-used 'logform' logging-format library, and the README advertises formatting...

Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url

Summary llm.chat reads the operator's provider key from the environment OPENAIAPIKEY, ANTHROPICAPIKEY, ... and sends it in the Authorization: Bearer header to baseurl, a parameter the caller controls. baseurl is only checked against the SSRF guard, and the guard allows any public host, so pointin...

Malicious code in react-fast-refresh-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcca3ccc0a35a13d8b3f30ff6019ab57782882ada4e01b941fbee77ad1236115 Package typosquats a React/Meta-branded name and falsely attributes authorship to 'Meta Open Source'. Its package.json declares a postinstall hook...

camel-vertx-websocket: Apache Camel Vertx Websocket: Server-Side Request Forgery and sensitive data exposure

A flaw was found in the Apache Camel Vertx Websocket component. This vulnerability allows an unauthenticated remote attacker to inject malicious query parameters into a WebSocket connection. This can lead to Server-Side Request Forgery SSRF, where the server is coerced into making requests to...

CLEANSTART-2026-BA39475 Security fixes in external-secrets-fips 0.17.0-r2

Package external-secrets-fips version 0.17.0-r2 fixes 75 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2025-61726, CVE-2026-27143, CVE-2025-68121...

CLEANSTART-2026-QP70970 Security fixes in sealed-secrets 0.36.6-r2

Package sealed-secrets version 0.36.6-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-YP94336 Security fixes in external-secrets-operator 2.4.1-r0

Package external-secrets-operator version 2.4.1-r0 fixes 3 vulnerabilities: CVE-2026-32952, ghsa-pjcq-xvwq-hhpj, ghsa-mh2q-q3fh-2475...

CLEANSTART-2026-SQ12998 Security fixes in external-secrets 1.1.0-r0

Package external-secrets version 1.1.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-LB77178 Security fixes in external-secrets-operator 2.7.0-r1

Package external-secrets-operator version 2.7.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-ZK94752 Security fixes in sealed-secrets 0.37.0-r1

Package sealed-secrets version 0.37.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-UH65554 Security fixes in sealed-secrets 0.35.0-r3

Package sealed-secrets version 0.35.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-TH78371 Security fixes in secrets-store-csi-driver-fips 1.5.4-r0

Package secrets-store-csi-driver-fips version 1.5.4-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-YC42491 Security fixes in external-secrets 2.2.0-r0

Package external-secrets version 2.2.0-r0 fixes 29 vulnerabilities: CVE-2026-39820, CVE-2020-8912, CVE-2020-8911, ghsa-pjcq-xvwq-hhpj, ghsa-78h2-9frx-2jm8...

CLEANSTART-2026-SB84870 Security fixes in external-secrets-operator 1.1.0-r0

Package external-secrets-operator version 1.1.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-CD20874 Security fixes in external-secrets-operator 2.7.0-r2

Package external-secrets-operator version 2.7.0-r2 fixes 3 vulnerabilities: ghsa-gcjh-h69q-9w9g, ghsa-hrxh-6v49-42gf, CVE-2026-41178...

CLEANSTART-2026-VC40164 Security fixes in sealed-secrets 0.36.6-r3

Package sealed-secrets version 0.36.6-r3 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-YF59488 Security fixes in external-secrets 2.3.0-r1

Package external-secrets version 2.3.0-r1 fixes 7 vulnerabilities: CVE-2026-32952, CVE-2026-29181, CVE-2026-2303, ghsa-pjcq-xvwq-hhpj, ghsa-mh2q-q3fh-2475...

CLEANSTART-2026-CO71096 Security fixes in external-secrets-operator 2.8.0-r0

Package external-secrets-operator version 2.8.0-r0 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-PQ72835 Security fixes in external-secrets-fips 0.17.0-r1

Package external-secrets-fips version 0.17.0-r1 fixes 5 vulnerabilities: CVE-2025-47913, CVE-2020-8911, CVE-2025-47914, CVE-2025-58181, CVE-2020-8912...