EUVD-2026-3093

Malicious code in spire.officejs-externs npm...

Malicious code in spire.officejs-document (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d977ed41d3fbf548651b650de7a64445638d9290c37650ea4063a4cdb9dfab The package spire.officejs-document was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-0942

Malicious code in spire.officejs-document npm...

MAL-2026-41 Malicious code in spire.officejs-document (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d977ed41d3fbf548651b650de7a64445638d9290c37650ea4063a4cdb9dfab The package spire.officejs-document was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in spire.officejs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-39 Malicious code in spire.officejs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-0943

Malicious code in spire.officejs-common npm...

EUVD-2026-0940

Malicious code in spire.officejs-editors npm...

MAL-2026-40 Malicious code in spire.officejs-editors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16e661181ec9b4834133423f88991671288814200d66aa148195cc9c06b5aff The package spire.officejs-editors was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in spire.officejs-editors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16e661181ec9b4834133423f88991671288814200d66aa148195cc9c06b5aff The package spire.officejs-editors was found to contain malicious code. Source: ossf-package-analysis...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: policy-controller, terraform-provider-google, kubelet-csr-approver, kubernetes-dashboard-auth, kargo, rke2-cloud-provider, nvidia-container-toolkit, spire-controller-manager, temporal, opa-envoy, helm-push, postgres-operator, terraform, mongodb-kubernetes-operator,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: policy-controller, terraform-provider-google, kubelet-csr-approver, kubernetes-dashboard-auth, kargo, rke2-cloud-provider, nvidia-container-toolkit, spire-controller-manager, temporal, opa-envoy, helm-push, postgres-operator, terraform, mongodb-kubernetes-operator,...

EUVD-2021-1097

Malware in sbrugna...

EUVD-2021-13869

Malware in sbrugna...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, sbom-convert, postgres-operator, weaviate, smarter-device-manager, hugo-extended, k6, amazon-cloudwatch-agent, cilium, trino, gitea, steampipe, atlantis, kube-logging-operator, gh, cargobump, cert-manager-csi-driver, sbom-scorecard,...

CVE-2021-27098

In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 certificate with a URI SAN for a SPIFFE ID that the agent is not authorized to...

CVE-2021-27099

In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "awsiid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issuance of an arbitrary SPIFFE ID within the same trust domain, if the attacker controls the value of ...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: authservice, cortex, flannel-cni-plugin, crane, sbom-convert, postgres-operator, age, k6, aws-application-networking-k8s, rancher-webhook, trino, filebrowser, kserve-rest-proxy, timoni, kube-logging-operator, velero-plugin-for-microsoft-azure, gh, haproxy-ingress,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: authservice, cortex, flannel-cni-plugin, crane, sbom-convert, postgres-operator, age, k6, aws-application-networking-k8s, rancher-webhook, trino, filebrowser, kserve-rest-proxy, timoni, kube-logging-operator, velero-plugin-for-microsoft-azure, gh, haproxy-ingress,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, victoriametrics-operator-fips, s5cmd, vertical-pod-autoscaler, nvidia-nsight-compute-12.9, terraform-provider-sendgrid, rabbitmq-default-user-credential-updater, go-licenses, dockerize, speedtest-go, regclient, elvish, gitness, nri-kafka...