CVE-2026-53970 ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

CVE-2026-53970

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

CVE-2026-53970 ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

MAL-2026-14040 Malicious code in @workoscalifant/sudoku-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a676b7bd005c67960fae27b9371d1c321998f5d7f6f0d9fc5f2b7d27fb22ce package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath, which execFileSyncs prebuilt/linux-x64/sudoku-hint wi...

CVE-2026-19821

creationtimestamp| type| source ---|---|--- 2026-08-14 13:29:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mt2bbfjm642h...

opencve v3.1.0

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

CVE-2026-33818

creationtimestamp| type| source ---|---|--- 2026-08-14 12:01:01+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24djqyvn2y 2026-08-22 12:01:12+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa366zvb2r 2026-09-20 05:20:06+00:00| seen|...

GO-2024-2907 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-3604 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: flux, kyverno-notation-aws-fips, flux-source-controller-fips, kyverno, kyverno-notation-aws, flux-source-controller...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux, flux-fips, kuma, flux-source-controller-fips, rancher-fleet, helm-push, helm-diff, gitlab-operator-fips, zarf, cert-manager-cmctl, cilium-cli, zarf-fips, cert-manager-cmctl-fips, gitlab-operator, flux-source-controller, rancher-fleet-fips, kots, helm-diff-fips...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: chartmuseum, k8sgpt, flux-helm-controller, helm-push, k9s, zot, kubevela, cilium-cli, helm-operator, up, kubescape, flux-source-controller, eksctl, zarf, kots, trivy...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: tw, chartmuseum, chartmuseum-fips, rancher-helm, linkerd2-fips, flux, k8sgpt, trivy-operator-fips, kargo, envoy-gateway-fips, helm-operator-fips, consul-k8s-fips, cert-manager-cmctl-fips, cerbos, eksctl, harbor-fips, zot, rancher-fleet-fips, trivy, flux-fips,...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: chartmuseum, k8sgpt, flux-helm-controller, helm-push, k9s, zot, kubevela, cilium-cli, helm-operator, up, kubescape, flux-source-controller, eksctl, zarf, kots, trivy...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: gogatekeeper, helm-mapkubeapis, helm-diff, melange, rancher-helm, skaffold, beats-fips, datadog-agent, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, flux-source-controller-fips, apm-server-fips, helm, xeol, kubescape, headlamp-fips,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: gogatekeeper, helm-mapkubeapis, helm-diff, melange, rancher-helm, skaffold, beats-fips, datadog-agent, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, flux-source-controller-fips, apm-server-fips, helm, xeol, kubescape, headlamp-fips,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: pgwatch, victoriametrics, flux-image-automation-controller, nova, terragrunt, flux-operator, metacontroller, localstack, podinfo, steampipe, aws-ebs-csi-driver, victorialogs-fips, victoriametrics-cluster-fips, nova-fips, go, cert-manager-fips, librechat, temporal-fip...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: pgwatch, victoriametrics, flux-image-automation-controller, nova, terragrunt, flux-operator, metacontroller, localstack, podinfo, steampipe, aws-ebs-csi-driver, victorialogs-fips, victoriametrics-cluster-fips, nova-fips, go, cert-manager-fips, librechat, temporal-fip...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argocd-image-updater, flux-image-automation-controller, src-fingerprint, kaniko, melange, zarf, go-licenses, syft, skaffold, gitea-fips, guac, flux-kustomize-controller, kaniko-fips, timoni, flux, tfsec, pulumi-language-dotnet,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, opentelemetry-collector-contrib-fips, amazon-cloudwatch-agent-fips, conftest, nri-prometheus, policy-controller, grype-fips, kube-bench-fips, nri-discovery-kubernetes, conftest-fips, amazon-cloudwatch-agent-operator, glab, openfga-fips,...