Vulnerabilities

Last updated 17 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
nova OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints Medium Risk 5.4 4 months ago 17 hours ago
dictanovaasr Malicious code in dictanovaasr (PyPI) Unknown 22 days ago 15 days ago
novalithtts Malicious code in novalithtts (PyPI) Unknown 27 days ago 15 days ago
renovate Renovate vulnerable to Azure DevOps token leakage in logs Medium Risk 6.0 6 years ago 24 days ago
renovate Renovate vulnerable to leakage of temporary repository tokens into Pull Request comments Medium Risk 5.3 7 years ago 24 days ago
nova OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability Medium Risk 6.0 4 years ago 2 months ago
nova OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity Medium Risk 6.0 4 years ago 2 months ago
nova OpenStack Compute (Nova) allows remote attackers to bypass intended restriction Medium Risk 6.0 4 years ago 2 months ago
nova OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack Medium Risk 6.0 4 years ago 2 months ago
nova OpenStack Compute (nova) allows remote authenticated users to cause a denial of service Medium Risk 6.0 4 years ago 2 months ago
nova OpenStack Nova instance migration process does not stop when instance is deleted Medium Risk 6.0 4 years ago 2 months ago
nova OpenStack Compute (Nova) Denial of Service vulnerability Medium Risk 6.0 4 years ago 2 months ago
nova OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service Medium Risk 6.0 4 years ago 2 months ago
nova OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information Medium Risk 6.0 4 years ago 2 months ago
@crysnovax/baileys-fixed Malicious code in @crysnovax/baileys-fixed (npm) Unknown 2 months ago 2 months ago
@crysnovax/baileys Malicious code in @crysnovax/baileys (npm) Unknown 2 months ago 2 months ago
@crysnovax/baileys-stable Malicious code in @crysnovax/baileys-stable (npm) Unknown 2 months ago 2 months ago
@crysnovax/plug Malicious code in @crysnovax/plug (npm) Unknown 2 months ago 2 months ago
stacknova Malicious code in stacknova (npm) Unknown 4 months ago 2 months ago
renovate-config-doctolib Malicious code in renovate-config-doctolib (npm) Unknown 7 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration Medium Risk 6.7 10 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via gleam manager and malicious gleam.toml file Medium Risk 6.7 10 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependencies Medium Risk 6.7 10 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via kustomize manager and malicious helm repository Medium Risk 6.7 10 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file Medium Risk 6.7 10 months ago 2 months ago
renovate Child processes spawned by Renovate incorrectly have full access to environment variables Medium Risk 5.5 9 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl` Medium Risk 6.7 10 months ago 2 months ago
renovate Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance Medium Risk 6.3 7 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases Medium Risk 5.4 2 years ago 2 months ago
iconova-react Malicious code in iconova-react (npm) Unknown 3 months ago 3 months ago
bpm-foundation-renovate Malicious code in bpm-foundation-renovate (npm) Unknown 3 months ago 3 months ago
bpm-renovate-renovate-config Malicious code in bpm-renovate-renovate-config (npm) Unknown 3 months ago 3 months ago
@ornikar/renovate-config Malicious code in @ornikar/renovate-config (npm) Unknown 3 months ago 3 months ago
nova OpenStack Cinder, glance, and Nova vulnerable to Path Traversal Medium Risk 5.7 3 years ago 4 months ago
nova OpenStack Cinder, glance, and Nova vulnerable to Path Traversal Medium Risk 5.7 4 months ago 4 months ago
nova OpenStack Nova calls qemu-img without format restrictions for resize High Risk 8.2 8 months ago 4 months ago
nova OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access Medium Risk 6.5 2 years ago 4 months ago
nova OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access Medium Risk 6.5 4 months ago 4 months ago
nova OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption High Risk 7.5 4 years ago 4 months ago
nova OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption High Risk 7.5 4 months ago 4 months ago
nova OpenStack Nova calls qemu-img without format restrictions for resize High Risk 8.2 4 months ago 4 months ago
nova OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints Medium Risk 5.4 4 months ago 4 months ago
@mastra/voice-aws-nova-sonic Malicious code in @mastra/voice-aws-nova-sonic (npm) Unknown 4 months ago 4 months ago
nova OpenStack Nova vulnerable to unauthorized access to potentially sensitive data Medium Risk 6.5 2 years ago 4 months ago
nova OpenStack Nova vulnerable to unauthorized access to potentially sensitive data Medium Risk 6.5 4 months ago 4 months ago
nova OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors Low Risk 3.0 4 years ago 4 months ago
nova OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image Low Risk 3.0 4 years ago 4 months ago
nova OpenStack Nova VMware instance leak potentially leading to compute DoS Medium Risk 6.0 4 years ago 4 months ago
nova OpenStack Nova Potential Xen connection password leak via StorageError Medium Risk 5.9 4 years ago 4 months ago
nova OpenStack Nova denial of service through compressed disk images Low Risk 3.0 4 years ago 4 months ago