GO-2023-2334 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, terragrunt, sops, argo-workflows, slsa-verifier, bank-vaults-fips, falcoctl-fips, dex, spire-server-fips, cosign-fips, timestamp-authority-fips, kots, flux-kustomize-controller, gitsign, cosign, kubescape, rekor, vexctl, cloudflared, tkn,...

GO-2026-5547 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, guac, chainctl, docker, docker-cli-buildx, crossplane, livekit-cli, cosign, kyverno, rekor-fips, kyverno-policy-reporter-plugins-kyverno, tflint-fips, gitlab-runner, docker-compose-fips, ratify-fips, kyverno-notation-aws, tkn-fips, trivy-fips,...

GO-2025-3527 vulnerabilities

Vulnerabilities for packages: kubescape, docker-compose...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: grafana-alloy, portieris, osv-scanner, datadog-agent, goreleaser, kpt, nuclei, trivy, docker-credential-gcr, aws-otel-collector, nerdctl, wolfictl, spire-server, cri-tools, rancher, zot, buf, envoy-gateway, rancher-machine, traefik, apko,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: juicefs, policy-controller, opentofu, tofu-controller, crane, fixuid, velero-plugin-for-microsoft-azure, hello-world-golang, s5cmd, vt-cli, kpt, docker-credential-gcr, kapp, fscrypt, nerdctl, sriov-network-device-plugin, aws-node-termination-handler,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, grafana-alloy, git-sync, policy-controller, crossplane-provider-azure-storage, cosign, goreleaser, atlantis, nuclei, trivy, rclone, crossplane, flyte, flux-notification-controller, octo-sts, terraform-provider-azurerm, argo-workflows,...

codex-security npm-v0.1.8

Codex Security @openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. See theCodex Security documentation for more details. Some cybersecurity requests and protected findings require approval through Trusted Access for Cyber. ...

cli v1.1306.3

Getting started with the Snyk CLI Introduction to the Snyk CLI Snyk is a developer-first, cloud-native security tool to scan and monitor your software development projects for security vulnerabilities. Snyk scans multiple content types for security issues: Snyk Open Source: Find and automatically...

CVE-2026-17632

CVE-2026-17632 affects IBM Langflow OSS versions 1.0.0–1.10.3. The vulnerability arises from improper validation of Python code during AST-based security scanning, enabling a remote authenticated attacker to execute arbitrary code. The NVD/CVE listings report a high-severity vector with CVSS 3.1:...

PT-2026-68299

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Remote authenticated attackers can execute arbitrary code due to improper validation of Python code during AST-based security scanning. AST Abstract Syntax Tree is a tree representatio...

CVE-2026-17632: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...

Security-First Evaluation of Text-To-Terraform: Benchmarking LLMs and SLMs for Secure IaC Generation

Cloud misconfiguration remains a leading cause of security incidents, yet whether LLMs and SLMs can generate security-compliant Infrastructure-as-Code is an open question. We benchmark seven models, three closed LLMs Claude Opus 4, GPT-5.4, Gemini 2.5 Pro and four open SLMs Qwen2.5-Coder-14B,...

oxo v2.9.18

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...

oxo v2.9.17

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...

oxo v2.9.14

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...

oxo v2.9.13

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...

installer v13.30.1

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...

oxo v2.9.7

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...

installer v13.30.0

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...

zaproxy vw2026-07-14

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...