GHSA-72X6-4J93-7W86 vulnerabilities

Vulnerabilities for packages: kubescape, podman, scorecard, guac, kaniko, conftest...

CVE-2026-63328 Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write

Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct paths under /.trivy/plugins without confining plugin names to that root, allowing an attacker who persuades a user to install or run a malicious plugin to write the manifest and...

Linux Distros Unpatched Vulnerability : CVE-2026-68466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout lpc32xxxmitdma waits for the DMA completion callback but ignores waitforcompletiontimeout. A...

CVE-2026-74243

In Red Hat Quay, when SECURITY_SCANNER_V4_PSK is not configured, unauthenticated attackers can flood the notification queue and inject path traversal characters into Clair API URLs, causing worker resource exhaustion and blind path manipulation on the Clair host. Mitigation: set the pre-shared ke...

GO-2026-4509 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2026-4512 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, nuclei...

GO-2025-3638 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: opencost-fips, flux-operator-fips, osv-scanner, glab, jaeger-fips, ferretdb, datadog-agent, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, jaeger, opencost, flux-operator, livekit-cli, datadog-agent-fips...

GO-2025-3638 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2026-4509 vulnerabilities

Vulnerabilities for packages: nuclei...

PT-2026-72129

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw exists when the SECURITY SCANNER V4 PSK pre-shared key is not configured. A remote unauthenticated attacker can send POST requests to the security scanner notification endpoint,...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182---Advanced-React-Server-Components-RCE-Exploit...

PYSEC-2026-1788 Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

Details There's a parsing logic error in picklescan and modelscan while trying to deal with opcode STACKGLOBAL. Function listglobals when handling STACKGLOBAL at position n, it is expected to track two arguments but in wrong range. The loop only consider the range from 1 to n-1 but forgets to...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the numpy.f2py.crackfortran process. An attacker can execute arbitrary code by crafting malicious pickle...

Linux Distros Unpatched Vulnerability : CVE-2026-14604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporter::ExportToBlob of the file...

@aegis-scan/core (>=0.18.1, <=0.19.0), @aegis-scan/reporters (>=0.18.4, <=0.19.0) +376 more potentially affected by CVE-2026-9697 via undici (>=7.24.0, <=7.27.2)

undici NPM version =7.24.0, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.8, =0.1.7, =21.2.4, =21.2.4, =0.1.0, =0.18.0, =0.1.0, =0.4.0, =0.1.0, =0.0.1, =0.1.2 and more Source cves: CVE-2026-9697 Source advisory: SNYK:JS-UNDICI-17372609...

Exploit for CVE-2026-20230

CVE-2026-20230 Scanner A Python-based scanner and validation...

Linux Distros Unpatched Vulnerability : CVE-2026-46327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: fix unlocked test for dmsuspendedmd The function dmblkreportzones tests if the device is suspended with the dmsuspendedmd call. However, this function is...

Wazuh 4.14.2 Security Scanner

This Python script is a non-exploitative security scanner designed to test basic responsiveness and message handling behavior of a Wazuh cluster communication endpoint...

Malicious Package

Overview opensearch-security-scanner is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between tho...