GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: db-operator, ksops, openbao, croc, timestamp-authority, crossplane-provider-sql, rekor, spicedb, mattermost, sops, aactl, tkn, dex, step-ca, temporal, envoy-gateway, splunk-otel-collector, chezmoi, age, fulcio, sqlexporter, trillian, certificate-transparency, apko,...

CLEANSTART-2026-XO49545 Within HostnameError

Multiple security vulnerabilities affect the spire-server-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-UI65993 Within HostnameError

Multiple security vulnerabilities affect the spire-server-fips package. Within HostnameError. See references for individual vulnerability details...

Malicious code in spire.officejs-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e04f3e2745bb2e3fd9eac19b0b9c45ad94c1ead97c8a9a4a1db6d412bd39eb The package spire.officejs-fonts was found to contain malicious code...

MAL-2026-313 Malicious code in spire.officejs-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e04f3e2745bb2e3fd9eac19b0b9c45ad94c1ead97c8a9a4a1db6d412bd39eb The package spire.officejs-fonts was found to contain malicious code...

Malicious code in spire.officejs-externs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfb46e06f3d17c765d605a42471cb4f6b75133ef12587b0dd769276a77fddcc The package spire.officejs-externs was found to contain malicious code...

EUVD-2026-3092

Malicious code in spire.officejs-fonts npm...

MAL-2026-312 Malicious code in spire.officejs-externs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfb46e06f3d17c765d605a42471cb4f6b75133ef12587b0dd769276a77fddcc The package spire.officejs-externs was found to contain malicious code...

EUVD-2026-3093

Malicious code in spire.officejs-externs npm...

Malicious code in spire.officejs-document (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d977ed41d3fbf548651b650de7a64445638d9290c37650ea4063a4cdb9dfab The package spire.officejs-document was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-0942

Malicious code in spire.officejs-document npm...

MAL-2026-41 Malicious code in spire.officejs-document (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d977ed41d3fbf548651b650de7a64445638d9290c37650ea4063a4cdb9dfab The package spire.officejs-document was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in spire.officejs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-39 Malicious code in spire.officejs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-0943

Malicious code in spire.officejs-common npm...

EUVD-2026-0940

Malicious code in spire.officejs-editors npm...

MAL-2026-40 Malicious code in spire.officejs-editors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16e661181ec9b4834133423f88991671288814200d66aa148195cc9c06b5aff The package spire.officejs-editors was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in spire.officejs-editors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16e661181ec9b4834133423f88991671288814200d66aa148195cc9c06b5aff The package spire.officejs-editors was found to contain malicious code. Source: ossf-package-analysis...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: mongo-tools, kube-metrics-adapter, nova, policy-controller, gogatekeeper, steampipe, regclient, newrelic-nri-kube-events, supercronic, falco-no-driver, nri-couchbase, slsa-verifier, spire-controller-manager, gitsign, opa, metrics-agent, nri-consul, sftpgo-plugin-kms,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: mongo-tools, kube-metrics-adapter, nova, policy-controller, gogatekeeper, steampipe, regclient, newrelic-nri-kube-events, supercronic, falco-no-driver, nri-couchbase, slsa-verifier, spire-controller-manager, gitsign, opa, metrics-agent, nri-consul, sftpgo-plugin-kms,...