37921 matches found
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: kubevela-fips, reports-server, kubescape-server-fips, minio-fips, commercial-grafana, gitlab-rails-ce-fips, seaweedfs-rocksdb, flux, vault-fips, keda-fips, zitadel, tekton-pipelines-fips, gatekeeper-fips, skaffold, zot, kine, trivy-operator-fips, gitea-fips,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: kubevela-fips, kubescape-server-fips, crossplane-provider-aws-memorydb, crossplane-provider-aws-wafv2, crossplane-provider-aws-elasticache, nuclei, packer, caddy-fips, gitlab-pages, seaweedfs-rocksdb, syft-fips, hcloud, crossplane-provider-aws-autoscaling,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: kubevela-fips, kubescape-server-fips, crossplane-provider-aws-memorydb, crossplane-provider-aws-wafv2, crossplane-provider-aws-elasticache, nuclei, packer, caddy-fips, gitlab-pages, seaweedfs-rocksdb, syft-fips, hcloud, crossplane-provider-aws-autoscaling,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: zarf, crossplane-provider-family-azure, cilium-cli, prometheus-operator, act, neuvector-sigstore-interface, kots, slsa-verifier, external-dns, external-secrets-operator, pulumi-language-java, policy-controller, docker-machine-driver-harvester, gh, guac,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: zarf, crossplane-provider-family-azure, cilium-cli, crossplane-provider-aws-cloudfront, prometheus-operator, act, crossplane-provider-aws-iam, neuvector-sigstore-interface, src, kots, crossplane-provider-aws-kms, slsa-verifier, crossplane-provider-aws-cloudwatchlogs,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: zarf, cilium-cli, prometheus-operator, act, kots, external-dns, external-secrets-operator, pulumi-language-java, docker-machine-driver-harvester, guac, melange, cilium, skaffold, scorecard, grype, cert-manager, buildah, openbao, podman, wolfictl, k9s, chezmoi, k3s,...
MAL-2026-6520 Malicious code in rollup-plugin-polyfill-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b21017bf70f3f7909beadfff916971711ef9d236ab81797b3bb53569034fa67c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6519 Malicious code in react-icon-svgs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff5b9a03e2018642801f0a9d253297cf1eb8ce39a8af4152f31bcd045e4768d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6518 Malicious code in ai-node-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae845382ff29756db63bf611b9b6bdbd49c44be3bcc8b283512e6590182ac48b ai-node-relay ships dist/index.js as its npm main entry, processed with javascript-obfuscator string-array rotation, 0x-prefixed identifiers, base64...
Malicious code in ai-node-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae845382ff29756db63bf611b9b6bdbd49c44be3bcc8b283512e6590182ac48b ai-node-relay ships dist/index.js as its npm main entry, processed with javascript-obfuscator string-array rotation, 0x-prefixed identifiers, base64...
Malicious code in ai-node-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcf100385d43e4bb2e48489a99d1fc2d4f919953963fa0339966bd5270f61b3 All published JavaScript in dist/ index.js, client.js, server.js, react.js, and sibling chunks is heavily obfuscated using javascript-obfuscator...
CVE-2026-11702
Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then the internal state for the PRNG is shared across processes and identical random streams will be produced. Secrets generated in multiprocess...
CVE-2026-11625
Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface is used, then the internal state for the PRNG is shared across processes and identical random streams will be produced...
AZL-91571 CVE-2026-11625 affecting package perl-Bytes-Random-Secure for versions less than 0.29-22
Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface is used, then the internal state for the PRNG is shared across processes and identical random streams will be produced...
CVE-2026-11625
Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface is used, then the internal state for the PRNG is shared across processes and identical random streams will be produced...
UBUNTU-CVE-2026-11625
Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface is used, then the internal state for the PRNG is shared across processes and identical random streams will be produced...
CVE-2026-11702 Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes
Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then the internal state for the PRNG is shared across processes and identical random streams will be produced. Secrets generated in multiprocess...
CVE-2026-11702 Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes
Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then the internal state for the PRNG is shared across processes and identical random streams will be produced. Secrets generated in multiprocess...
EUVD-2026-39641
Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then the internal state for the PRNG is shared across processes and identical random streams will be produced. Secrets generated in multiprocess...
CVE-2026-11702
Affected: Bytes::Random::Secure::Tiny for Perl, versions up to 1.011. Root cause: PRNG internal state is shared across forked processes if an object is initialised before forking, leading to identical random streams. Impact: secrets generated in multiprocess apps can be predictable across process...