GO-2026-5547 vulnerabilities

Vulnerabilities for packages: zot, chainctl, tflint, tkn-fips, ko, tekton-chains, rekor-fips, bom, docker-compose, neuvector-sigstore-interface-fips, trivy-fips, policy-controller, docker-compose-fips, zarf, cosign-fips, teleport, trivy, chainloop-cli, reports-server, tekton-chains-fips,...

GO-2025-3527 vulnerabilities

Vulnerabilities for packages: kubescape, docker-compose...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: envoy-gateway, rancher, newrelic-infrastructure-agent, apko, rancher-machine, zarf, buildah, gatekeeper, splunk-otel-collector, podman, rancher-agent, goreleaser, opentelemetry-operator, skopeo, melange, aws-otel-collector, zot, k8sgpt, amazon-cloudwatch-agent,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, stern, terraform-provider-kubernetes, terraform-provider-time, velero-plugin-for-aws, openbao-k8s, atlantis, extism, docker-cli-buildx, minio-object-browser, azure-ipam, falco-no-driver, mongo-tools, metacontroller, oras, mockgen, ipfs-cluster,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: chartmuseum, temporal, actions-runner-controller, argo-events, crossplane-provider-azure-authorization, git-sync, guac, gitea, atlantis, scorecard, policy-controller, temporal-server, zarf, kaniko, kubeflow-katib, kubernetes-dashboard-auth, wal-g, vexctl, goreleaser,...

CVE-2026-17632

CVE-2026-17632 affects IBM Langflow OSS versions 1.0.0–1.10.3. The vulnerability arises from improper validation of Python code during AST-based security scanning, enabling a remote authenticated attacker to execute arbitrary code. The NVD/CVE listings report a high-severity vector with CVSS 3.1:...

CVE-2026-17632: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...

PYSEC-2026-1429 GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

Summary GuardDog's safeextract function does not validate decompressed file sizes when extracting ZIP archives wheels, eggs, allowing attackers to cause denial of service through zip bombs. A malicious package can consume gigabytes of disk space from a few megabytes of compressed data...

CVE-2025-71375 picklescan - Undetected Remote Code Execution via _operator.methodcaller

picklescan before 0.0.34 fails to detect the operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using operator.methodcaller that evade detection and execute arbitrary code when loaded by pickle.load...

EUVD-2025-210271

picklescan before 0.0.27 contains a parsing logic error in the listglobals function when handling STACKGLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files with arguments at position zero to trigg...

CVE-2026-53810

OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanned package payloads. Attackers with trusted operator access can manipulate extension metadata to load plugin code outside reviewed package entry points...

CVE-2026-53810 OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata

OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanned package payloads. Attackers with trusted operator access can manipulate extension metadata to load plugin code outside reviewed package entry points...

Kubernetes Security Scanning: A DevSecOps Guide

A clean container image is not proof of a secure Kubernetes workload. New CVEs, unsafe configurations, and excessive permissions can turn an approved deployment into an active exposure. Contact Hive Pro to review your Kubernetes container security priorities. Kubernetes security scanning is the...

osv-java-poc

OSV Scanner CVE Detection POC — Vulnerable Java App ⚠️ WA...

Exploiting LLM Agent Supply Chains Via Payload-Less Skills

Autonomous agents powered by Large Language Models LLMs acquire external functionalities through third-party skills available in open marketplaces. Adopting these integrations broadens the potential attack surface, prompting a need for systematic security evaluation. Current auditing mechanisms a...

Exploit for CVE-2026-24049

wheelaudit Python Wheel File Security Scanner — scan .wh...

Exploit for Deserialization of Untrusted Data in Facebook React

🛡️ CVE-2025-55182 Security Tools Complete toolset for detec...

MCP Watch 操作系统命令注入漏洞

MCP Watch is a comprehensive security scanning program for Model Context Protocol servers by the individual developer Kapil Duraphe. An operating system command injection vulnerability exists in MCP Watch version 0.1.2 and earlier, which stems from command injection and could lead to arbitrary...

EUVD-2020-7381

Malware in sbrugna...

Fedora 41 : lemonldap-ng (2025-67d99d2c39)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-67d99d2c39 advisory. See https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-21-3-is-out/ Tenable has extracted the preceding description block directly from the Fedora...