ROOT-APP-NPM-CVE-2026-53550 CVE-2026-53550 in js-yaml - Patched by Root

Root has patched CVE-2026-53550 in the js-yaml package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-64718 CVE-2025-64718 in js-yaml - Patched by Root

Root has patched CVE-2025-64718 in the js-yaml package for Root:npm. Multiple fixed versions available...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.29 security and extras update

Red Hat OpenShift Container Platform release 4.21.29 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.34 security and extras update

Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.10 security and extras update

Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

CVE-2021-30145

creationtimestamp| type| source ---|---|--- 2026-08-16 19:00:06+00:00| seen| Telegram/XOWZ03GAQaPFK4QUsQrA4nOgtkuM--UdLdqLjOtVYCBWw 2026-08-17 00:00:09+00:00| published-proof-of-concept| Telegram/XOWZ03GAQaPFK4QUsQrA4nOgtkuM--UdLdqLjOtVYCBWw...

Exploit for Deserialization of Untrusted Data in Snakeyaml_Project Snakeyaml

CVE-2022-1471 — SnakeYAML RCE lab Jira / Automation for Jira...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, buildkitd, kuberlr, spire-controller-manager, cloud-provider-vsphere, dive, dapr, terraform-provider-grafana, cloud-sql-proxy, rancher-telemetry, grafana-agent-operator, kubernetes-csi-external-snapshotter, kubernetes-dns-node-cache,...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, buildkitd, kuberlr, spire-controller-manager, cloud-provider-vsphere, dive, dapr, terraform-provider-grafana, cloud-sql-proxy, rancher-telemetry, grafana-agent-operator, kubernetes-csi-external-snapshotter, kubernetes-dns-node-cache,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, buildkitd, kuberlr, spire-controller-manager, cloud-provider-vsphere, dive, dapr, terraform-provider-grafana, cloud-sql-proxy, rancher-telemetry, grafana-agent-operator, kubernetes-csi-external-snapshotter, kubernetes-dns-node-cache,...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, buildkitd, kuberlr, spire-controller-manager, cloud-provider-vsphere, dive, dapr, terraform-provider-grafana, cloud-sql-proxy, rancher-telemetry, grafana-agent-operator, kubernetes-csi-external-snapshotter, kubernetes-dns-node-cache,...

CVE-2026-45774

A flaw was found in compliance-trestle. The library's profile import mechanism, which handles trestle:// URIs and relative file paths, does not properly validate paths. This allows a remote attacker to craft a malicious OSCAL Open Security Controls Assessment Language profile YAML file containing...

CVE-2026-73643

A flaw was found in js-yaml, a JavaScript YAML parser. A remote attacker could exploit this vulnerability by providing specially crafted YAML input containing nested flow collections. This can lead to exponential parsing time when the application processes untrusted input, consuming excessive CPU...

GHSA-5GJX-96WQ-C8R2 vulnerabilities

Vulnerabilities for packages: helm...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter-fips, crossplane-provider-aws-kms-fips, crossplane-provider-aws-cloudfront, cephcsi, eck-operator-fips, plugin-barman-cloud, cluster-api-provider-vsphere, mcp-grafana, migrate, eck-operator, crossplane-provider-terraform-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, crossplane-provider-aws-cloudfront, actions-runner-controller-fips, eck-operator-fips, cloud-provider-aws-fips, eck-operator, prometheus-blackbox-exporter-fips, prometheus-elasticsearch-exporter, tkn-fips, traefik-fips,...

GO-2023-1849 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: zot, gitea, kargo, bom, zarf, nuclei, goreleaser, pulumi, snyk-cli, argocd-image-updater, wolfictl, crossplane, task, kubescape, k9s, argo-workflows, flux, gptscript, src-fingerprint, pulumi-language-dotnet, timoni, grafana-alloy, pulumi-kubernetes-operator, syft,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: zot, gitea, kargo, bom, zarf, nuclei, goreleaser, pulumi, snyk-cli, argocd-image-updater, wolfictl, crossplane, task, kubescape, k9s, argo-workflows, flux, gptscript, src-fingerprint, pulumi-language-dotnet, timoni, grafana-alloy, pulumi-kubernetes-operator, syft,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: zot, gitea, kargo, nfpm, bom, zarf, nuclei, argo-cd, steampipe, trufflehog, pulumi, snyk-cli, witness, argocd-image-updater, wolfictl, crossplane, kubescape, rancher-fleet, k9s, argo-workflows, flux, gptscript, src-fingerprint, pulumi-language-dotnet, grafana-alloy,...