GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: aws-sigv4-proxy-fips, cilium-certgen, kepler, kyverno, yunikorn-k8shim, velero, google-guest-agent, gcsfuse, secrets-store-csi-driver-provider-aws-fips, kubescape-operator, kube-oidc-proxy, terraform-provider-azapi-fips, portieris, docker-credential-acr-env, conftest...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: aws-sigv4-proxy-fips, cilium-certgen, kepler, kyverno, yunikorn-k8shim, velero, google-guest-agent, gcsfuse, secrets-store-csi-driver-provider-aws-fips, kubescape-operator, kube-oidc-proxy, terraform-provider-azapi-fips, portieris, docker-credential-acr-env, conftest...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: aws-sigv4-proxy-fips, cilium-certgen, kepler, kyverno, yunikorn-k8shim, velero, google-guest-agent, gcsfuse, secrets-store-csi-driver-provider-aws-fips, kubescape-operator, kube-oidc-proxy, terraform-provider-azapi-fips, portieris, docker-credential-acr-env, conftest...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: aws-sigv4-proxy-fips, cilium-certgen, kepler, kyverno, yunikorn-k8shim, velero, google-guest-agent, gcsfuse, secrets-store-csi-driver-provider-aws-fips, kubescape-operator, kube-oidc-proxy, terraform-provider-azapi-fips, portieris, docker-credential-acr-env, conftest...

EUVD-2019-2945

Malware in sbrugna...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, shfmt, secrets-store-csi-driver-provider-aws-fips, k8sgpt-operator, kubernetes-dashboard-fips, vault-k8s, nats, sftpgo-plugin-pubsub, karma-fips, cluster-api, eks-distro-fips, kube-vip, hivemind, nvidia-nsight-compute-13.1,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-system-agent, rancher-fleet, vcluster, mesosphere-vsphere-csi, yunikorn-k8shim, cloud-provider-gcp-cloud-controller-manager, docker-machine-driver-harvester, emissary...

GHSA-HJ2P-8WJ8-PFQ4 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-system-agent, rancher-fleet, vcluster, mesosphere-vsphere-csi, yunikorn-k8shim, cloud-provider-gcp-cloud-controller-manager, docker-machine-driver-harvester, emissary...

GHSA-HJ2P-8WJ8-PFQ4 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-fleet-fips, cloud-provider-gcp-cloud-controller-manager-fips, yunikorn-k8shim, longhorn-share-manager, azurefile-csi, rancher-system-agent, azurefile-csi-fips, emissary, mesosphere-vsphere-csi, rancher-agent, rancher,...

CVE-2019-11252

A flaw was found in Kubernetes that allows the logging of credentials when mounting AzureFile and CephFS volumes. This flaw allows an attacker to access kubelet logs, read the credentials, and use them to access other services. The highest threat from this vulnerability is to confidentiality...

CVE-2019-11252

The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes...