59796 matches found
GHSA-4HFP-H4CW-HJ8P vulnerabilities
Vulnerabilities for packages: eksctl, flux-helm-controller, chart-testing, trivy, k8ssandra-client, zot, rancher-helm, cilium-cli, helm-push, k9s, chartmuseum, flux-source-controller, zarf, cert-manager-cmctl, helm-operator, cluster-api-helm-controller, flux, kubescape, tw, kots, pluto, helm-docs...
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: eksctl, flux-helm-controller, chart-testing, trivy, k8ssandra-client, zot, rancher-helm, cilium-cli, helm-push, k9s, chartmuseum, flux-source-controller, zarf, cert-manager-cmctl, helm-operator, cluster-api-helm-controller, flux, kubescape, tw, kots, pluto, helm-docs...
GHSA-5XQW-8HWV-WG92 vulnerabilities
Vulnerabilities for packages: eksctl, flux-helm-controller, chart-testing, trivy, k8ssandra-client, zot, rancher-helm, cilium-cli, helm-push, k9s, chartmuseum, flux-source-controller, zarf, cert-manager-cmctl, helm-operator, cluster-api-helm-controller, flux, kubescape, tw, kots, pluto, helm-docs...
GHSA-4HFP-H4CW-HJ8P vulnerabilities
Vulnerabilities for packages: helm-operator, flux-source-controller-fips, harbor-fips, cluster-api-helm-controller-fips, chart-testing-fips, chartmuseum-fips, zot, kots, consul-k8s-fips, cert-manager-cmctl-fips, flux, pluto, tw, helm-operator-fips, cilium-cli, k8ssandra-client, helm-docs,...
GHSA-5XQW-8HWV-WG92 vulnerabilities
Vulnerabilities for packages: helm-operator, flux-source-controller-fips, harbor-fips, cluster-api-helm-controller-fips, chart-testing-fips, chartmuseum-fips, zot, kots, consul-k8s-fips, cert-manager-cmctl-fips, flux, pluto, tw, helm-operator-fips, cilium-cli, k8ssandra-client, helm-docs,...
CVE-2025-24375
Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...
SUSE-SU-2025:20184-1 Security update for elemental-operator
This update for elemental-operator fixes the following issues: - Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the...
Security update for elemental-operator
This update for elemental-operator fixes the following issues: Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the K...
messmittel-exakt.de Cross Site Scripting vulnerability OBB-4043504
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
casemephi.com Cross Site Scripting vulnerability OBB-4043288
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ibw.at Cross Site Scripting vulnerability OBB-4043184
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
toolkits.horiba-abx.com Cross Site Scripting vulnerability OBB-4043142
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release
The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...
Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release
The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: rancher-webhook, falcoctl, restic, sealed-secrets, step, sriov-network-device-plugin, chartmuseum, scorecard, crossplane-provider-sql, cloudnative-pg, kubernetes-dns-node-cache, gobuster, conftest, xcaddy, dbmate, overmind, amazon-cloudwatch-agent-operator,...
GHSA-G9PC-8G42-G6VQ vulnerabilities
Vulnerabilities for packages: rancher-webhook, falcoctl, restic, sealed-secrets, step, sriov-network-device-plugin, chartmuseum, scorecard, crossplane-provider-sql, cloudnative-pg, kubernetes-dns-node-cache, gobuster, conftest, xcaddy, dbmate, overmind, amazon-cloudwatch-agent-operator,...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: multus-cni-fips, kube-rbac-proxy-fips, argo-workflows-fips, cadvisor-fips, vexctl, chartmuseum-fips, prometheus-pushgateway-fips, x509-certificate-exporter-fips, secrets-store-csi-driver-provider-azure-fips, cert-exporter-fips, haproxy-ingress, litestream, capslock,...
canoe-europe.org Cross Site Scripting vulnerability OBB-4043070
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
m.politik-lexikon.at Cross Site Scripting vulnerability OBB-4043057
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
firstname-bordeaux.hoteldebordeaux.net Cross Site Scripting vulnerability OBB-4043026
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...