CVE-2026-64887 Airwall - Hardcoded Secrets

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1...

MAL-2026-14083 Malicious code in heft-storybook-v6-react-tutorial-storykit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5955868f72344703128add3301e3a85b51773de502f24e636fe0b9bba86d42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zip-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9a990db9c306a25a8b0663088429ef5cf3939c32a9f8d6b1fc3066e8bf42a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14073 Malicious code in @veertly/web-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 356a8a00db1082e33357c6fa0bd625070977f72964236e992e1be94dcd419764 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hrp9872 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3863301b783d96a98f60f37331d4a61f921e6dee3c5c35f8788df21da5fd549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-logging-utils-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in saps_secplayground_npm_ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13fa9c8b7672d88eb66c92e717080df3e10efc1b6f881b2f7361af0a5a7fbb37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-22555

A flaw was found in Gitea. An API Application Programming Interface endpoint responsible for forking repositories into an organization failed to properly check if a user had the necessary permissions to create repositories within that organization. This allowed a read-only organization member to...

GO-2024-2982 vulnerabilities

Vulnerabilities for packages: vault...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: vault-csi-provider, secrets-store-csi-driver...

GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5602 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: falcoctl, minio, external-secrets-fips, boring-registry, minio-fips, spire-server-fips, mc-fips, mc, boring-registry-fips, spire-server, falcoctl-fips...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: falcoctl, minio, external-secrets-fips, boring-registry, spire-server-fips, tekton-chains, kubescape, vexctl, mc, cosign-fips, gitsign, spire-server, falcoctl-fips...

GO-2026-5693 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips, flux-fips, nemo, teleport, gitlab-rails-ce-fips, terragrunt-fips, guac, flux, gitlab-rails-ce, upwind-agent, gitaly, argo-cd-fips, argo-cd, terragrunt, external-secrets-operator-fips, external-secrets-operator...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, seaweedfs-fips, frp, syncthing-fips, gitea, flux-source-controller, cert-manager, neuvector-fips, zot, percona-server-mongodb-operator, cert-manager-google-cas-issuer, rancher-webhook, gitlab-runner, zitadel, cert-manager-cmctl-fips,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: dagger, temporal-ui-server-fips, logstash-exporter-fips, flux-source-controller, kubernetes-dashboard-fips, flannel, skopeo, zot, dynamic-localpv-provisioner, logstash-exporter, flux-image-reflector-controller, boring-registry-fips, crossplane-provider-aws-iam,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: argo-workflows, frp, temporal-ui-server-fips, flux-source-controller, kubernetes-dashboard-fips, terragrunt, skopeo, neuvector-fips, temporal, aactl, policy-controller, zot, policy-controller-fips, wolfictl, rook, kube-rbac-proxy, tkn, vault-csi-provider, dgraph, zar...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: vitess, argo-workflows, knative-serving-fips, gitea, etcd, flux-source-controller, gatekeeper-fips, cert-manager, trivy-operator-fips, aactl, zot, omnictl-multiarch-fips, mattermost-fips, trivy-fips, k9s-fips, zitadel, tekton-pipelines-fips, gitlab-kas,...