61 matches found
GHSA-G9PC-8G42-G6VQ vulnerabilities
Vulnerabilities for packages: fluent-operator, wazero, argo-workflows, nri-rabbitmq, sbomqs, k3s, glab, snyk-cli, oras, hello-world-golang, petname, nodetaint, gitleaks, step-issuer, amass, kube-rbac-proxy, licenseclassifier, aws-flb-firehose, croc, kubernetes, kubernetes-csi-external-resizer,...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, kubernetes-dashboard-fips, cni-plugins-fips, age-fips, actions-runner-controller, google-guest-agent-manager, prometheus-redis-exporter, sops-fips, cass-operator-fips, fuse-overlayfs-snapshotter, aws-flb-kinesis-fips, local-path-provisioner,...
CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3
CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3. A patched version of the package is available...
CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd (CVE-2025-30204)
The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30204 advisory. - golang-jwt is a Go...
CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5
CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5. A patched version of the package is available...
CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns (CVE-2024-51744)
The version of application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-51744 advisory. - golang-jwt is a Go implementation...
Azure Linux 3.0 Security Update: azcopy / git-lfs / golang / influxdb / keda (CVE-2025-22870)
The version of azcopy / git-lfs / golang / influxdb / keda installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22870 advisory. - Matching of hosts against proxy patterns can improperly treat an IPv6...
CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4
CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...
CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4
CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-kms, falcoctl, argo-workflows, fulcio, argo-rollouts, flux-kustomize-controller, k3s, crossplane-provider-azure-storage, mc, glab, atlantis, terraform-provider-azurerm, buildkitd, rook, ko, crossplane-provider-azure, sqlexporter, traefik, kubernetes,...
AZL-59169 CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...
AZL-59209 CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...
Azure Linux 3.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)
The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory. - An attacker can pass a malicious malforme...
CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-2
CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-2. A patched version of the package is available...
AZL-58404 CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-5
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...
AZL-58458 CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...
CBL Mariner 2.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)
The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory. - An attacker can pass a malicious malforme...
CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-3
CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-3. A patched version of the package is available...