CVE-2026-11976

MonsterInsights Pro updates 10.2.0 and 10.2.2 were distributed from the official update bucket and contain a malicious file, class-system-check.php, due to a compromised AWS S3 bucket. Three distinct variants were observed on 2026-06-11, all using the same AES-256-GCM key, indicating a single thr...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: migrate, opentelemetry-collector, chezmoi, docker-credential-ecr-login, nats, doppler-kubernetes-operator, crossplane-provider-sql, rqlite, terraform-provider-azapi, gh, crossplane-provider-azure-authorization, flux-image-automation-controller,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: migrate, chezmoi, docker-credential-ecr-login, nats, doppler-kubernetes-operator, crossplane-provider-sql, rqlite, terraform-provider-azapi, gh, crossplane-provider-azure-authorization, flux-image-automation-controller, docker-credential-acr-env, telegraf,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: migrate, chezmoi, docker-credential-ecr-login, nats, doppler-kubernetes-operator, crossplane-provider-sql, rqlite, terraform-provider-azapi, gh, crossplane-provider-azure-authorization, flux-image-automation-controller, docker-credential-acr-env, telegraf,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kubelet-csr-approver, docker-credential-ecr-login, nats, doppler-kubernetes-operator, terraform-provider-azapi, conftest, docker-credential-acr-env, octo-sts, k8sgateway, sonobuoy, petname, extism, incert, ferretdb, fixuid, go-licenses, go-md2man, terraform-docs, kin...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

CVE-2025-58187 vulnerabilities

Vulnerabilities for packages: kubelet-csr-approver, docker-credential-ecr-login, nats, doppler-kubernetes-operator, terraform-provider-azapi, conftest, docker-credential-acr-env, octo-sts, k8sgateway, sonobuoy, petname, extism, incert, ferretdb, fixuid, go-licenses, go-md2man, terraform-docs, kin...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, kube-metrics-adapter, licenseclassifier, maru, bom, cert-manager-webhook-pdns, envconsul, helm-set-status, kubelet-csr-approver, kubernetes-csi-external-attacher, kubeflow, timescaledb-parallel-copy, docker-credential-ecr-login,...