GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: helm-set-status, argo-events, cni-plugins, glow, kapp, rabbitmq-default-user-credential-updater, tempo, dive, guac, pluto, ipfs-cluster, nri-apache, falcoctl, yunikorn-k8shim, wgcf, kor, fzf, kubernetes-csi-driver-hostpath, emissary, dex, headlamp, render-template,...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, harbor, nodetaint, wal-g, docker-credential-gcr, kpt, neuvector, kubecolor, steampipe, oauth2-proxy, opa, hubble, aws-application-networking-k8s, nri-nginx, cluster-api-helm-controller, nova, aws-otel-collector, nri-rabbitmq, glow, k8sgatewa...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, harbor, nodetaint, wal-g, docker-credential-gcr, kpt, neuvector, kubecolor, steampipe, oauth2-proxy, opa, hubble, aws-application-networking-k8s, nri-nginx, cluster-api-helm-controller, nova, aws-otel-collector, nri-rabbitmq, glow, k8sgatewa...

Migrating Veeam Kasten for Kubernetes to the Red Hat Certified Operators Catalog

Challenge One or more of the following symptoms may be observed in a Red Hat OpenShift environment running Veeam Kasten for Kubernetes : Upgrades are no longer available for the Veeam Kasten operator installed from the Red Hat Operator Marketplace catalog. Veeam Kasten Enterprise - Term or Veeam...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.9 and Red Hat build of Keycloak 26.2.9 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

openSUSE Security Advisory (SUSE-SU-2025:03278-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, sftpgo-plugin-geoipfilter, docker-credential-ecr-login, gitsign, grafana-operator, vault-benchmark, checksec, nats, shfmt, php-fpmexporter, newrelic-nri-statsd, kube-vip-cloud-provider, git-lfs, bank-vaults, secrets-store-csi-driver-provider-aws,...

CVE-2025-58767 vulnerabilities

Vulnerabilities for packages: jruby, kube-fluentd-operator...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, sftpgo-plugin-geoipfilter, docker-credential-ecr-login, gitsign, grafana-operator, vault-benchmark, checksec, nats, shfmt, php-fpmexporter, newrelic-nri-statsd, kube-vip-cloud-provider, git-lfs, bank-vaults, secrets-store-csi-driver-provider-aws,...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: jruby, kube-fluentd-operator...

CVE-2025-58767 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.3-fluentd-kubernetes-daemonset, gitlab-rails-ce-fips, jruby, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, gitlab-rails-ce, truffleruby, kube-fluentd-operator...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: prometheus-bind-exporter, bank-vaults, kube-vip, gcp-compute-persistent-disk-csi-driver-fips, nvidia-nsight-compute-12.8, prometheus-node-exporter-fips, gostatsd, blobfuse2, kubernetes-dashboard-fips, terraform-provider-time, kubernetes-csi-node-driver-registrar-fips...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.3-fluentd-kubernetes-daemonset, gitlab-rails-ce-fips, jruby, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, gitlab-rails-ce, truffleruby, kube-fluentd-operator...

weblogic-monitoring-exporter

This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...

Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...

SUSE-SU-2025:03278-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...

Moderate: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.17.2-1 Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...

Important: Red Hat Security Advisory: VolSync v0.12 security fixes and container updates

VolSync v0.12 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2025-10374

A security flaw has been discovered in Shenzhen Sixun Business Management System 7/11. This affects an unknown part of the file /Adm/OperatorStop. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...