Search: github.com/advisories | Heykuki News

HK

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

61.

PHP Security Advisories Database

github.com/FriendsOfPHP

6 years ago

1 points

62.

PHP Security Advisories Database

github.com/FriendsOfPHP

6 years ago

1 points

63.

Nx compromised: malware uses Claude code CLI to explore the filesystem

10 months ago

493 points

64.

Malicious versions of Nx and some supporting plugins were published

github.com/nrwl

10 months ago

443 points

65.

Helm local code execution via a malicious chart

github.com/helm

a year ago

172 points

66.

Arbitrary file execution in TZinfo (Ruby)

github.com/tzinfo

4 years ago

106 points

67.

Trivy ecosystem supply chain temporarily compromised

github.com/aquasecurity

3 months ago

102 points

68.

Composer leaks contents of tokens configured as GitHub OAuth tokens

github.com/composer

a month ago

70 points

69.

Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server

6 years ago

29 points

70.

CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover

github.com/mastodon

2 years ago

21 points

71.

Flatpak: Complete Sandbox Escape

github.com/flatpak

2 months ago

20 points

72.

CVE-2025-5689: New authd users logging in via SSH are members of the root group

github.com/ubuntu

a year ago

11 points

73.

Unauthenticated Remote Code Execution in Erlang/OTP SSH

github.com/erlang

a year ago

8 points

74.

1-day RCE vulnerability in vim

3 months ago

7 points

75.

Insecure Random Number Generation

github.com/juliangruber

5 years ago

7 points

76.

Libfuse io_uring use-after-free and NULL deref (CVE-2026-33150, CVE-2026-33179)

github.com/libfuse

3 months ago

5 points

77.

Hardcoded Auth Token in RustFS (CVE-2025-68926)

github.com/rustfs

6 months ago

5 points

78.

CVE in jsoup: users should upgrade to version 1.14.2 [CVSS 7.5]

5 years ago

3 points

79.

Axios: Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

github.com/axios

2 months ago

3 points

80.

Unauthorized of Cline CLI with modified postinstall script to install OpenClaw

github.com/cline

4 months ago

3 points

81.

New authd users logging in via SSH are members of the root group

github.com/ubuntu

a year ago

3 points

82.

Container breakout through process.cwd trickery and leaked fds

github.com/opencontainers

2 years ago

3 points

83.

Heap memory corruption in ASN.1 parsing code

github.com/programa-stic

10 years ago

3 points

84.

Unauthenticated Object Write Vulnerability in MinIO

github.com/minio

2 months ago

2 points

85.

Displaying a crafted file in Tabby terminal can run shell commands

github.com/Eugeny

a month ago

2 points

86.

Denial of Service Vulnerability in React Server Components

github.com/facebook

a month ago

2 points

87.

macOS Stats: Local Privilege Escalation via Exposed XPC Method

github.com/exelban

5 months ago

2 points

88.

.NET Security Feature Bypass Vulnerability

github.com/dotnet

8 months ago

2 points

89.

Malicious versions of Nx and some supporting plugins were published

github.com/nrwl

10 months ago

2 points

90.

Visual Studio Code for Linux Remote Code Execution Vulnerability CVE-2024-43601

github.com/microsoft

2 years ago

2 points