CVE-2026-53970 ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

CVE-2026-53970

ZeroBrew 0.3.1 and earlier is affected by a missing integrity verification vulnerability in the Ruby compatibility shim (shim.rb). An attacker could substitute malicious content at formula resources or URL-based patch URLs without checksum validation, allowing remote code execution when downloads...

EUVD-2026-58684

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

CVE-2026-53970 ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

CVE-2026-19821

creationtimestamp| type| source ---|---|--- 2026-08-14 13:29:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mt2bbfjm642h...

CVE-2026-33818

creationtimestamp| type| source ---|---|--- 2026-08-14 12:01:01+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24djqyvn2y 2026-08-22 12:01:12+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa366zvb2r...

GO-2024-2907 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-3604 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, flux-fips, flux, kyverno-notation-aws-fips, kyverno-fips, flux-source-controller, kyverno, kyverno-notation-aws...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: zot, k9s, k8sgpt, up, kubescape, zarf, chartmuseum, trivy, helm-push, helm-operator, flux-source-controller, kots, flux-helm-controller, cilium-cli, eksctl, kubevela...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos-fips, chartmuseum-fips, consul-k8s, flux-source-controller-fips, helm-docs, cluster-api-helm-controller, pluto, rancher-fleet-fips, chartmuseum, linkerd2, flux-helm-controller, trivy-fips, flux-helm-controller-fips, helm-operator-fips, kargo, chart-testing, zo...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: kuma, cert-manager-cmctl-fips, flux-source-controller-fips, zarf, gitlab-operator-fips, flux-fips, helm-diff-fips, flux, helm-push, helm-diff, rancher-fleet-fips, zarf-fips, cert-manager-cmctl, flux-source-controller, kots, gitlab-operator, cilium-cli, rancher-fleet...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: zot, k9s, k8sgpt, up, kubescape, zarf, chartmuseum, trivy, helm-push, helm-operator, flux-source-controller, kots, flux-helm-controller, cilium-cli, eksctl, kubevela...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: nova-fips, pluto, nova, pgwatch, steampipe, victorialogs, metacontroller, grafana-operator-fips, flux-helm-controller, aws-ebs-csi-driver-fips, temporal-fips, flux-image-reflector-controller, loki-fips, flux-fips, omnictl-multiarch, dkron, flux-source-controller,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: nova-fips, pluto, nova, pgwatch, steampipe, victorialogs, metacontroller, grafana-operator-fips, flux-helm-controller, aws-ebs-csi-driver-fips, temporal-fips, flux-image-reflector-controller, loki-fips, flux-fips, omnictl-multiarch, dkron, flux-source-controller,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, buildkitd, gitlab-rails-ce-fips, cluster-api-helm-controller-fips, trivy-operator, gogatekeeper, kubevela-fips, k3s, kaniko-fips, rancher-agent, zot, helm-set-status, kubescape, dagger, helm-mapkubeapis, trivy, docker-cli-buildx-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argo-cd, syft, melange, chainctl, flux-source-controller-fips, argo-workflows-fips, gitea, tfsec, wolfictl, flux-image-automation-controller-fips, packer-fips, crossplane, src-fingerprint-fips, pulumi-language-yaml, flux-kustomize-controller-fips, argocd-image-update...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, buildkitd, gitlab-rails-ce-fips, cluster-api-helm-controller-fips, trivy-operator, gogatekeeper, kubevela-fips, k3s, kaniko-fips, rancher-agent, zot, helm-set-status, kubescape, dagger, helm-mapkubeapis, trivy, docker-cli-buildx-fips,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: ko, agentbeat-fips, openfga-fips, trivy-operator, glow, mattermost-fips, pgtimetable-fips, glab, kyverno-notation-aws, github-mcp-server, spark-operator-fips, cloud-sql-proxy, calico, falcoctl, dagger, trivy, seaweedfs, opentelemetry-operator, gitlab-cng,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, prometheus-elasticsearch-exporter, terraform-provider-sendgrid-fips, buildkitd, grpcurl, metacontroller, secrets-store-csi-driver, k3s, mc, falcoctl, prometheus-postgres-exporter, zot, pulumi-language-dotnet,...