732 matches found
GHSA-9VCR-G537-3W5V Fleet vulnerable to OS command injection in software packages
Summary A vulnerability in Fleet's software installer pipeline could allow a crafted software package to execute arbitrary commands as root macOS/Linux or SYSTEM Windows on managed endpoints when an uninstall is triggered. Impact When a software package .pkg, .deb, .rpm, .exe, or .msi is uploaded...
GHSA-2HFH-9H53-QC24 vulnerabilities
Vulnerabilities for packages: wildfly...
GHSA-389R-GV7P-R3RP vulnerabilities
Vulnerabilities for packages: src-fingerprint, witness, chainctl-fips, src-fingerprint-fips, mapotf, redpanda-console, coder, zot, gitlab-runner-fips, wolfictl, goreleaser, packer, kubescape, grafana-fips, cg, external-secrets-operator, crossplane-fips, gitaly-fips, bom, kots, gitaly, trivy-fips,...
RHSA-2026:12740 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:5979 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:6035 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:7477 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:7418 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:7701 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:7443 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:7461 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: postgresql18: postgresql-18.3-1.2.hum1 aarch64, x8664 postgresql-contrib-18.3-1.2.hum1 aarch64, x8664 postgresql-docs-18.3-1.2.hum1 aarch64, x8664 postgresql-plperl-18.3-1.2.hum1 aarch64, x8664...
CVE-2025-55674 vulnerabilities
Vulnerabilities for packages: superset...
CVE-2026-34387
Fleet is an open source device management platform. A command injection vulnerability exists in Fleet’s software installer pipeline prior to version 4.81.1, enabling arbitrary code execution as root on macOS/Linux or SYSTEM on Windows when uninstalling a crafted software package. Affected compone...
CVE-2025-0716 vulnerabilities
Vulnerabilities for packages: solr...
MAL-2025-162872 Malicious code in nokire-loklok20 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b0af9676c19ced3467255a64d0b8ca21b77ab2e0e930c3983d5e0611ad8693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sinta-rangginang10-pore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8bf26e22bea6a357a387dbcc115f5fbc9a9baf83c539916d6daefb7be10268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in subjective_harrier_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9e83f6d207bb8036316b92c7e420c844502fdb5ed3ca40ff9151f2cac9f502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
