Advisory Catalog

Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated

ShowBeing exploited Today Last 7 days

Package typeAll npm PyPI Packagist Go RubyGems

SeverityAll Critical High Medium Low Malicious

Advisory	Severity	Attack odds	Published	Packages
Gitea: Remote Code Execution via diffpatch Git Hook Installation BIT-gitea-2026-60004, CVE-2026-60004, GHSA-rcr6-4jqh-j84m, GO-2026-6433 KEV NVD OSV GO-2026-6433 OSV GHSA-rcr6-4jqh-j84m	CriticalExploited	24.0%	26 Aug, 2026	Go code.gitea.io/gitea Go gitea.dev
Trivy ecosystem supply chain was briefly compromised CVE-2026-33634, GHSA-69fq-xp46-6x23, GO-2026-4919 KEV NVD OSV GO-2026-4919 OSV GHSA-69fq-xp46-6x23	CriticalExploited	59.7%	23 Mar, 2026	GitHub Actions aquasecurity/setup-trivy GitHub Actions aquasecurity/trivy-action Go github.com/aquasecurity/trivy
Wazuh server vulnerable to remote code execution CVE-2025-24016, GHSA-hcrc-79hj-m3qh, GO-2025-3459 KEV NVD OSV GO-2025-3459 OSV GHSA-hcrc-79hj-m3qh	CriticalExploited	93.8%	10 Feb, 2025	Go github.com/wazuh/wazuh