336444 matches found
Malicious code in utils-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in thepackagethatworks_ (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in thepackagethatworks_
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions = 4.16.5.1...
GO-2025-4261 vulnerabilities
Vulnerabilities for packages: gitea-fips...
GO-2026-5887 vulnerabilities
Vulnerabilities for packages: gatus-fips, gatus...
GO-2026-4753 vulnerabilities
Vulnerabilities for packages: neuvector, dex-fips, mattermost-fips, commercial-grafana, rancher-agent, rancher, teleport-operator-fips, omni-fips, zitadel, gotrue, mattermost, gotrue-fips, teleport, neuvector-fips, omni, dex...
GO-2026-5224 vulnerabilities
Vulnerabilities for packages: vault, vault-fips, cloudbeat, authentik-fips, rancher-agent, rancher, azure-service-operator, cloudbeat-fips, authentik, azure-service-operator-fips...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: argo-workflows, flux-image-automation-controller-fips, flux, src-fingerprint, guac, gitea-fips, nuclei, argocd-image-updater, osv-scanner, packer, pulumi, syft, tekton-pipelines, pulumi-kubernetes-operator, chainctl, wolfictl, dagger, tfsec, kaniko, chezmoi, kots,...
GO-2026-5597 vulnerabilities
Vulnerabilities for packages: chainloop-cli, flux, flux-fips, syft-fips, upwind-agent, syft, rancher-fleet, chainloop-cli-fips, scorecard, packer-fips, argo-cd-fips, kyverno, rclone, amazon-ssm-agent, seaweedfs-rocksdb-fips, seaweedfs-rocksdb, nemo, external-secrets-operator-fips, gitlab-rails-ce...
GO-2026-4602 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator-fips, prometheus-beat-exporter-fips, docker-compose-fips, packer, thanos, gatekeeper-fips, newrelic-nri-kube-events-fips, kubeflow-fips, blobfuse2, fluxcd-kustomize-mutating-webhook-fips, prometheus-statsd-exporter, s5cmd-fips,...
GO-2026-5496 vulnerabilities
Vulnerabilities for packages: src-fingerprint, gitea-fips, nuclei, pulumi, act, packer, syft-fips, upwind-agent, mapotf, xeol-fips, chainctl, dagger, kaniko, chainloop-cli-fips, kubescape-server-fips, grype, mapotf-fips, cloudbeat-fips, src-fingerprint-fips, trufflehog, kyverno,...
GO-2026-4339 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator-fips, prometheus-beat-exporter-fips, packer, gatekeeper-fips, kubeflow-fips, blobfuse2, fluxcd-kustomize-mutating-webhook-fips, prometheus-statsd-exporter, s5cmd-fips, volcano-fips, vault-benchmark, x509-certificate-exporter,...
GO-2025-3373 vulnerabilities
Vulnerabilities for packages: prometheus-beat-exporter-fips, docker-compose-fips, packer, thanos, prometheus-statsd-exporter, nri-discovery-kubernetes, kaniko, vault-benchmark, x509-certificate-exporter, kubernetes-dashboard-metrics-scraper-fips, nvidia-nsight-compute-13.1, src-fingerprint-fips,...
GO-2024-3107 vulnerabilities
Vulnerabilities for packages: prometheus-beat-exporter-fips, thanos, terraform-provider-azurerm, prometheus-statsd-exporter, addon-resizer-fips, nri-discovery-kubernetes, kaniko, crossplane-provider-azure-sql, hugo-extended, kubernetes-dashboard-metrics-scraper-fips, src-fingerprint-fips,...
GO-2024-2718 vulnerabilities
Vulnerabilities for packages: tekton-chains-fips, falcoctl, spire-server-fips, vexctl, chainctl, wolfictl, tekton-chains, ko, slsa-verifier, tkn, tkn-fips, melange, apko, neuvector-sigstore-interface, goreleaser, policy-controller, zarf, skaffold, spire-server, policy-controller-fips, aactl,...
GO-2025-3841 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GO-2025-3416 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble...