116423 matches found
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: vexctl, kubescape, cosign, flux-kustomize-controller, flux-source-controller, slsa-verifier, terragrunt, aactl, oauth2-proxy, tkn, argo-workflows, fulcio, cloudflared, sops, dex, tekton-chains, gitsign, rekor, spire-server, kots...
GO-2026-5853 vulnerabilities
Vulnerabilities for packages: aactl, witness, kubescape, falcoctl, tekton-chains, podman, kyverno, gitsign, kyverno-notation-aws, flux-source-controller, slsa-verifier, ratify, skopeo, undock, buildah, zarf, kots...
GO-2023-2181 vulnerabilities
Vulnerabilities for packages: aactl, kubescape, tkn, tekton-chains, melange, cosign, skaffold, flux-source-controller, ko, slsa-verifier, apko, spire-server, policy-controller...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: kubernetes, crossplane-provider-aws-firehose, crossplane-provider-aws-s3, helm, scorecard, crossplane-provider-aws-cloudwatchlogs, glab, src, ko, syft, cloud-provider-aws, pulumi, chezmoi, mods, caddy, minio, crossplane-provider-aws-lambda, flux-kustomize-controller,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: vexctl, witness, kubescape, falcoctl, teleport, cosign, tflint, kyverno-notation-aws, ko, ratify, sigstore-scaffolding, goreleaser, zarf, kyverno, skaffold, flux-source-controller, zot, gh, aactl, tkn, tekton-chains, neuvector-sigstore-interface, crossplane,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: vexctl, witness, kubescape, falcoctl, teleport, cosign, tflint, trivy, kyverno-notation-aws, ko, ratify, sigstore-scaffolding, goreleaser, zarf, kyverno, skaffold, flux-source-controller, slsa-verifier, zot, buildkitd, gh, trivy-operator, aactl, tkn, tekton-chains,...
GO-2026-4309 vulnerabilities
Vulnerabilities for packages: aactl, witness, tkn, falcoctl, goreleaser, teleport, kyverno, gitsign, kyverno-notation-aws, flux-source-controller, ratify, zot, policy-controller...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: vexctl, witness, kubescape, falcoctl, teleport, cosign, tflint, trivy, kyverno-notation-aws, ko, ratify, sigstore-scaffolding, goreleaser, zarf, kyverno, skaffold, flux-source-controller, slsa-verifier, zot, buildkitd, gh, trivy-operator, aactl, tkn, tekton-chains,...
GO-2024-3166 vulnerabilities
Vulnerabilities for packages: vexctl, kubescape, falcoctl, cosign, trivy, sigstore-scaffolding, zarf, melange, flux-source-controller, slsa-verifier, zot, gh, aactl, tkn, apko, wolfictl, tekton-chains, neuvector-sigstore-interface, gitsign, rekor, spire-server, policy-controller...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: terraform-provider-azurerm, guac, crossplane-provider-azure-sql, scorecard, step-ca, crossplane-provider-azure-authorization, k3s, falcoctl, flux-helm-controller, kubescape, src-fingerprint, glab, ksops, cosign, kargo, pulumi-kubernetes-operator, sigstore-scaffolding...
PT-2026-72043
ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...
CVE-2026-72839
creationtimestamp| type| source ---|---|--- 2026-08-13 22:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msypldq3wl2e 2026-08-15 08:00:05+00:00| seen| Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw 2026-08-15 13:40:04+00:00| seen|...
Malicious code in source-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c2f07bb4a673bf18d866e697b1a943783696d2871fbc5e5987c2117377e798 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14013 Malicious code in source-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c2f07bb4a673bf18d866e697b1a943783696d2871fbc5e5987c2117377e798 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-13977 Malicious code in cspell-esm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e857800f57969e257ed22cd056f2e4a4395de09ac9b69becd0c7c2b931314ab Package name resembles the widely-used 'cspell' library but its main entry index.js exports an empty object and provides no functionality. Its...
CVE-2026-73669
creationtimestamp| type| source ---|---|--- 2026-08-13 20:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hi7gjwjvodaob...
CVE-2026-13460
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...
CVE-2026-13460
CVE-2026-13460 affects IBM Storage Scale GUI, with versions 5.2.3.0–5.2.3.8 and 6.0.0.0–6.0.1.0 containing a hardcoded token in the GUI source used for inter-node cluster communication and REST API authentication. The security bulletin indicates fixes in 5.2.3.9 or later and 6.0.1.1 or later. Rem...
CVE-2026-13460
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...