CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: cerbos, helm-mapkubeapis, kargo, linkerd2, k8ssandra-client, kots, envoy-gateway, trivy, k9s, zarf, helm-docs, cilium-cli, kubescape, helm-operator, helm-push, rancher-fleet, chart-testing, chartmuseum, flux-source-controller, flux, nova, trivy-operator,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: cerbos, helm-mapkubeapis, kargo, linkerd2, k8ssandra-client, kots, envoy-gateway, trivy, k9s, zarf, helm-docs, cilium-cli, kubescape, helm-operator, helm-push, rancher-fleet, chart-testing, chartmuseum, flux-source-controller, flux, nova, trivy-operator,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: cerbos, helm-mapkubeapis, kargo, linkerd2, k8ssandra-client, kots, envoy-gateway, trivy, k9s, zarf, helm-docs, cilium-cli, kubescape, helm-operator, helm-push, rancher-fleet, chart-testing, chartmuseum, flux-source-controller, flux, nova, trivy-operator,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: cerbos, helm-mapkubeapis, kargo, linkerd2, k8ssandra-client, kots, envoy-gateway, trivy, k9s, zarf, helm-docs, cilium-cli, kubescape, helm-operator, helm-push, rancher-fleet, chart-testing, chartmuseum, flux-source-controller, flux, nova, trivy-operator,...

Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator

Thai police arrest SMS Blaster operator in smishing scam and bust crypto laundering gang moving $30M monthly through…...

CVE-2025-8916 vulnerabilities

Vulnerabilities for packages: zipkin, druid, kserve-modelmesh, thingsboard...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: trino, apicurio-registry, kserve-modelmesh, management-api-for-apache-cassandra-5.0, keycloak, sonarqube, strimzi-kafka-operator, thingsboard, druid, spark, akhq, wildfly, flyway, apache-nifi, apache-pulsar, tez, celeborn...

GHSA-4CX2-FC23-5WG6 vulnerabilities

Vulnerabilities for packages: zipkin, druid, kserve-modelmesh, thingsboard...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: trino, apicurio-registry, kserve-modelmesh, management-api-for-apache-cassandra-5.0, keycloak, sonarqube, strimzi-kafka-operator, thingsboard, druid, spark, akhq, wildfly, flyway, apache-nifi, apache-pulsar, tez, celeborn...

CVE-2025-8916 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, pinot, druid, hadoop-fips, kayenta, opensearch, kserve-modelmesh, zipkin, elasticsearch-fips, kayenta-fips, elasticsearch, pinot-fips, thingsboard, logstash, neo4j...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: tez, strimzi-kafka-operator, apache-hop, management-api-for-apache-cassandra-4.0, apicurio-registry, elasticsearch-fips, localstack, management-api-for-apache-cassandra-4.1, apache-nifi, spark-fips, akhq, keycloak, kserve-modelmesh, infinispan, seata, elasticsearch,...

GHSA-4CX2-FC23-5WG6 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, pinot, druid, hadoop-fips, kayenta, opensearch, kserve-modelmesh, zipkin, elasticsearch-fips, kayenta-fips, elasticsearch, pinot-fips, thingsboard, logstash, neo4j...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: tez, strimzi-kafka-operator, apache-hop, management-api-for-apache-cassandra-4.0, apicurio-registry, elasticsearch-fips, localstack, management-api-for-apache-cassandra-4.1, apache-nifi, spark-fips, akhq, keycloak, kserve-modelmesh, infinispan, seata, elasticsearch,...

UBUNTU-CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-55196

External Secrets Operator (github.com/external-secrets/external-secrets) contains a vulnerability in versions 0.15.0–0.19.1 where PushSecret List() calls on Kubernetes Secret and SecretStore resources ignore namespace selectors. This allows an attacker who can create or update PushSecret resource...

CVE-2025-55196 External Secrets Operator Missing Namespace Restriction in PushSecret and SecretStore List() Calls Allows Unauthorized Secret Access

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-55196 External Secrets Operator Missing Namespace Restriction in PushSecret and SecretStore List() Calls Allows Unauthorized Secret Access

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...