CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter, cluster-api-gcp-controller, mockgen, sonobuoy,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter, cluster-api-gcp-controller, mockgen, sonobuoy,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, cluster-api-helm-controller, portieris, step-kms-plugin, incert, kubecolor, cri-tools, mesosphere-vsphere-csi, envconsul, dask-gateway, fq, azure-workload-identity-webhook, nova, capslock, kubebuilder, falco-exporter,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, aws-sigv4-proxy, age, prometheus-mongodb-exporter, flux, sbom-scorecard, pvc-autoresizer, kube-conformance, nvidia-nsight-compute-12.8, blob-csi, runc, google-osconfig-agent, net-kourier-fips, wgcf, ini-file, pushprox-fips, sriov-network-device-plugin,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, aws-sigv4-proxy, age, prometheus-mongodb-exporter, flux, sbom-scorecard, pvc-autoresizer, kube-conformance, nvidia-nsight-compute-12.8, blob-csi, runc, google-osconfig-agent, net-kourier-fips, wgcf, ini-file, pushprox-fips, sriov-network-device-plugin,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, aws-sigv4-proxy, age, prometheus-mongodb-exporter, flux, sbom-scorecard, pvc-autoresizer, kube-conformance, nvidia-nsight-compute-12.8, blob-csi, runc, google-osconfig-agent, net-kourier-fips, wgcf, ini-file, pushprox-fips, sriov-network-device-plugin,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, aws-sigv4-proxy, age, prometheus-mongodb-exporter, flux, sbom-scorecard, pvc-autoresizer, kube-conformance, nvidia-nsight-compute-12.8, blob-csi, runc, google-osconfig-agent, net-kourier-fips, wgcf, ini-file, pushprox-fips, sriov-network-device-plugin,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, aws-sigv4-proxy, age, prometheus-mongodb-exporter, flux, sbom-scorecard, pvc-autoresizer, kube-conformance, nvidia-nsight-compute-12.8, blob-csi, runc, google-osconfig-agent, net-kourier-fips, wgcf, ini-file, pushprox-fips, sriov-network-device-plugin,...

MAL-2025-42127 Malicious code in azure-ipam-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44b5c0e4141f25b2fb25c0fcd206aa203961a4a13336461bab2825b51576f88d The OpenSSF Package Analysis project identified 'azure-ipam-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in azure-ipam-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44b5c0e4141f25b2fb25c0fcd206aa203961a4a13336461bab2825b51576f88d The OpenSSF Package Analysis project identified 'azure-ipam-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...