GO-2025-4020 vulnerabilities

Vulnerabilities for packages: k9s-fips, gptscript, filebrowser, mattermost, nuclei, gotenberg, wolfictl, chainctl, mattermost-fips, undock, chezmoi, gitleaks, grype-fips, trufflehog, cg, k9s, kubescape, syft-fips, grype, trufflehog-fips, zarf, kots, syft, grype-db...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: envoy-gateway, nuclei, vcluster, grafana-alloy, steampipe, trivy-operator, guac, gitness, tflint, terragrunt, trufflehog, zarf, kubescape-operator, k9s, zot, nsc, podman, undock, terraform, gitleaks, trivy, xeol, gptscript, filebrowser, rancher-fleet, opentofu...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: gptscript, trufflehog, zarf, syft, wolfictl, k9s, undock, nuclei, kubescape, filebrowser, gitleaks, kots, grype, chezmoi...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: goreleaser, syft, buildah, aws-otel-collector, grype, openfga, falcoctl, trufflehog, zarf, wolfictl, k9s, dagger, tw, opentelemetry-collector, docker-cli-buildx, zot, melange, docker-compose, trivy, buf, nerdctl, opentelemetry-collector-contrib, cadvisor, osv-scanner...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: syft, tfsec, nuclei, argo-workflows, crossplane, grafana-alloy, steampipe, trivy-operator, grype, guac, pulumi-language-java, flux-source-controller, gitlab-runner, trufflehog, zarf, wolfictl, k9s, dagger, cerbos, kubescape, teleport, pulumi-language-yaml, argo-event...

MAL-2026-11736 Malicious code in @or-sdk/view-templates (npm)

npm/@or-sdk/view-templates is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-5184 Malicious code in sf-silly-goose-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

Malicious code in sf-silly-goose-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argo-cd, mapotf, packer, gptscript, trivy-fips, nuclei, kargo, terragrunt-fips, chainctl, skaffold, kyverno-fips, src-fingerprint, gomplate, zarf-fips, scorecard, google-osconfig-agent, melange, trivy-operator-fips, xeol, external-secrets-operator-fips,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: rancher-agent, cert-manager-cmctl, harbor, kyverno-notation-aws, nuclei, seaweedfs, cert-manager, rancher, grafana, yunikorn-k8shim, rancher-webhook, flux-source-controller, gitlab-runner, openbao, spqr, trufflehog, dex, ratify, teleport, frp, k6, zot, minio,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: rancher-agent, cert-manager-cmctl, harbor, kyverno-notation-aws, nuclei, seaweedfs, cert-manager, rancher, grafana, yunikorn-k8shim, rancher-webhook, flux-source-controller, gitlab-runner, openbao, spqr, trufflehog, dex, ratify, teleport, frp, k6, zot, minio,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, seaweedfs-rocksdb-fips, ratify-fips, packer, beats, vault-fips, nuclei, cert-manager-google-cas-issuer-fips, seaweedfs, zitadel, openbao-fips, kyverno-fips, commercial-grafana, cert-manager-istio-csr-fips, syncthing, xeol,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, seaweedfs-rocksdb-fips, ratify-fips, packer, beats, vault-fips, nuclei, cert-manager-google-cas-issuer-fips, seaweedfs, zitadel, openbao-fips, kyverno-fips, commercial-grafana, cert-manager-istio-csr-fips, syncthing, xeol,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, syft, tfsec, nuclei, crossplane, helm-push, guac, openbao, datadog-agent, k9s, hydra, pulumi-language-yaml, flux-notification-controller, docker-cli-buildx, argo-rollouts, pulumi-kubernetes-operator, gitaly, rclone, cluster-api, snyk-cli,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, syft, tfsec, nuclei, crossplane, helm-push, guac, openbao, datadog-agent, k9s, hydra, pulumi-language-yaml, flux-notification-controller, docker-cli-buildx, argo-rollouts, pulumi-kubernetes-operator, gitaly, rclone, cluster-api, snyk-cli,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-cd, terraform-provider-databricks, crossplane-provider-azure-managedidentity, packer, ratify-fips, crossplane-provider-aws-memorydb-fips, gptscript, vault-fips, trivy-fips, nuclei, crossplane-provider-aws-rds, crossplane-provider-keycloak, terragrunt-fips,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: dgraph, envoy-gateway, nuclei, argo-workflows, seaweedfs, spicedb, timestamp-authority, mariadb-operator, grafana-alloy, kubeflow-pipelines, ksops, trillian, openfga, nri-mysql, trufflehog, tailscale, openbao, terragrunt, tkn, wolfictl, rekor, hydra,...

How Security Tool Misuse Is Reshaping Cloud Compromise

Key Takeaways Legitimate secret-scanning tools such as TruffleHog have been operationalized in real-world cloud attack campaigns. Attack progression commonly follows a repeatable sequence: credential discovery, live validation, permission enumeration, and data access. Exposed long-lived access ke...

CVE-2026-26958 vulnerabilities

Vulnerabilities for packages: dgraph, envoy-gateway, nuclei, argo-workflows, seaweedfs, spicedb, timestamp-authority, mariadb-operator, grafana-alloy, kubeflow-pipelines, ksops, trillian, openfga, nri-mysql, trufflehog, tailscale, openbao, terragrunt, tkn, wolfictl, rekor, hydra,...

CVE-2026-26958 vulnerabilities

Vulnerabilities for packages: rekor-fips, ratify-fips, timestamp-authority-fips, beats, vault-fips, nuclei, fulcio, seaweedfs, sftpgo, terragrunt-fips, kyverno-fips, temporal-server, hydra, step-issuer, kyverno-policy-reporter, age, splunk-otel-collector, apko, prometheus-mysqld-exporter, croc,...