117940 matches found
GO-2024-3166 vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface, gh, falcoctl, spire-server, aactl, slsa-verifier, policy-controller, rekor, vexctl, gitsign, tkn, sigstore-scaffolding, trivy, apko, zarf, melange, kubescape, zot, tekton-chains, wolfictl, flux-source-controller, cosign...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: argo-events, src-fingerprint, flux-kustomize-controller, flux-notification-controller, fulcio, neuvector-sigstore-interface, kargo, gh, ksops, falcoctl, spire-server, guac, aactl, crossplane-provider-azure, flux-image-reflector-controller, flux, k3d, slsa-verifier,...
PT-2026-72043
Name of the Vulnerable Software and Affected Versions ZeroBrew versions prior to 0.3.2 Description A missing integrity verification in the Ruby compatibility shim allows network attackers to execute arbitrary code. By substituting malicious content at formula resource or URL-based patch URLs,...
GHSA-7JMF-5VCP-F672
creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...
CVE-2026-72839
creationtimestamp| type| source ---|---|--- 2026-08-13 22:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msypldq3wl2e 2026-08-15 08:00:05+00:00| seen| Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw 2026-08-15 13:40:04+00:00| seen|...
Malicious code in source-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c2f07bb4a673bf18d866e697b1a943783696d2871fbc5e5987c2117377e798 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14013 Malicious code in source-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c2f07bb4a673bf18d866e697b1a943783696d2871fbc5e5987c2117377e798 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-13977 Malicious code in cspell-esm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e857800f57969e257ed22cd056f2e4a4395de09ac9b69becd0c7c2b931314ab Package name resembles the widely-used 'cspell' library but its main entry index.js exports an empty object and provides no functionality. Its...
CVE-2026-73669
creationtimestamp| type| source ---|---|--- 2026-08-13 20:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hi7gjwjvodaob...
CVE-2026-13460
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...
CVE-2026-13460
CVE-2026-13460 affects IBM Storage Scale GUI, with versions 5.2.3.0–5.2.3.8 and 6.0.0.0–6.0.1.0 containing a hardcoded token in the GUI source used for inter-node cluster communication and REST API authentication. The security bulletin indicates fixes in 5.2.3.9 or later and 6.0.1.1 or later. Rem...
CVE-2026-13460
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack through the --remove-source-files process. An attacker can cause arbitrary file deletion by atomically replacing a source file with a symlink between the completion of a file transfer and the subsequent unlink operation...
CVE-2026-53793
creationtimestamp| type| source ---|---|--- 2026-08-13 17:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msy5p3qdxa2j...
CVE-2026-55987 OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)
OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens incomplete fix of 38009...
CVE-2026-54249
creationtimestamp| type| source ---|---|--- 2026-08-13 16:32:36+00:00| seen| https://gist.github.com/alon710/d833b9431a8f61aeff2a0496f83968ee...
SUSE CVE-2026-68116
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote entry, all existing sources are first marked for deletion and vxlanmdbremotesrcsadd is then called to add the new source...
GHSA-RM43-82J9-R4MJ
creationtimestamp| type| source ---|---|--- 2026-08-13 15:33:17+00:00| seen| https://gist.github.com/alon710/d62f1422f9dac4c6a1fc5e9b8b380828...
CVE-2026-53800
rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion. Attackers can atomically substitute a symlink for a source file between transfer completion and the unlink...
ALPINE-CVE-2026-53800
rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion. Attackers can atomically substitute a symlink for a source file between transfer completion and the unlink...