OSV - Open Source Vulnerabilities

GHSA-f8q5-h5qh-33mh

GitHub Actions/xygeni/xygeni-action

xygeni-action v5 tag poisoned with C2 backdoor

34 minutes ago

Fix available
Severity - 9.3 (Critical)

GHSA-78cv-mqj4-43f7

PyPI/tornado

Tornado has incomplete validation of cookie attributes

35 minutes ago

Fix available
Severity - 5.4 (Medium)

CGA-226q-h7j7-3cp4

Chainguard/nextcloud-server-32
Wolfi/nextcloud-server-32

See record for full details

52 minutes ago

Fix available

GHSA-73j8-2gch-69rq

NuGet/Microsoft.Bcl.Memory
NuGet/Microsoft.NetCore.App.Runtime.linux-arm
NuGet/Microsoft.NetCore.App.Runtime.linux-arm64
NuGet/Microsoft.NetCore.App.Runtime.linux-musl-arm
NuGet/Microsoft.NetCore.App.Runtime.linux-musl-arm64
... 8 more

.NET Denial of Service Vulnerability

1 hour ago

Fix available
Severity - 7.5 (High)

GHSA-4vgm-c2wm-63mw

NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm
NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm64
NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-arm
NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-x64
... 7 more

.NET Denial of Service Vulnerability

1 hour ago

Fix available
Severity - 7.5 (High)

MAL-2026-1347

npm/f0-abstraction-resolver

Malicious code in f0-abstraction-resolver (npm)

1 hour ago

No fix available

MAL-2026-1348

npm/locale-clamp-middleware

Malicious code in locale-clamp-middleware (npm)

1 hour ago

No fix available

MINI-qvgv-9h8x-96rr

MinimOS/victoriametrics-operator
MinimOS/victoriametrics-operator-compat

See record for full details

1 hour ago

Fix available

MINI-pjhj-8v8f-8j43

MinimOS/grafana-rollout-operator-fips

See record for full details

1 hour ago

Fix available

MINI-pfpj-pvr7-f954

MinimOS/cue
MinimOS/cue-bash-completion
MinimOS/cue-fish-completion
MinimOS/cue-zsh-completion

See record for full details

1 hour ago

Fix available

MINI-pfh2-5ppc-5c33

MinimOS/velero-fips
MinimOS/velero-restore-helper-fips

See record for full details

1 hour ago

Fix available

MINI-j3r8-hhv9-xp5j

MinimOS/cilium-1.19
MinimOS/cilium-1.19-clustermesh-apiserver
MinimOS/cilium-1.19-compat
MinimOS/cilium-1.19-container-init
MinimOS/cilium-1.19-container-init-compat
... 4 more

See record for full details

1 hour ago

Fix available

MINI-gx9p-jp9h-j35f

MinimOS/kube-apiserver-1.35
MinimOS/kube-apiserver-1.35-compat
MinimOS/kube-controller-manager-1.35
MinimOS/kube-controller-manager-1.35-compat
MinimOS/kube-proxy-1.35
... 7 more

See record for full details

1 hour ago

Fix available

MINI-hq5h-phg9-q224

MinimOS/kube-apiserver-1.35
MinimOS/kube-apiserver-1.35-compat
MinimOS/kube-controller-manager-1.35
MinimOS/kube-controller-manager-1.35-compat
MinimOS/kube-proxy-1.35
... 7 more

See record for full details

1 hour ago

Fix available

MINI-hqgg-j7rw-24qv

MinimOS/keda-2.17
MinimOS/keda-2.17-admission-webhooks
MinimOS/keda-2.17-compat
MinimOS/keda-2.17-metrics-apiserver

See record for full details

1 hour ago

Fix available

MINI-ggrp-v6wr-q34x

MinimOS/kyverno-policy-reporter-ui-fips

See record for full details

1 hour ago

Fix available