EUVD-2024-3348

Malicious code in bioql PyPI...

EUVD-2022-7476

Malicious code in bioql PyPI...

EUVD-2024-0390

Malicious code in bioql PyPI...

EUVD-2022-6897

Malicious code in bioql PyPI...

EUVD-2022-1081

Malicious code in bioql PyPI...

EUVD-2025-16049

Malicious code in bioql PyPI...

EUVD-2024-50452

Malicious code in bioql PyPI...

CVE-2025-22872 affecting package cri-tools for versions less than 1.29.0-8

CVE-2025-22872 affecting package cri-tools for versions less than 1.29.0-8. A patched version of the package is available...

Fedora 44 : cri-o1.32 (2025-852b61fe59)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-852b61fe59 advisory. Automatic update for cri-o1.32-1.32.9-1.fc44. Changelog Thu Oct 2 2025 Bradley G Smith - 1.32.9-1 - Update to release 1.32.9 - Resolves: rhbz2333357...

Fedora 44 : cri-o1.33 (2025-7bc36fec81)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7bc36fec81 advisory. Automatic update for cri-o1.33-1.33.5-1.fc44. Changelog Thu Oct 2 2025 Bradley G Smith - 1.33.5-1 - Update to release v1.33.5 - Resolves: rhbz233335...

Fedora 44 : cri-o1.31 (2025-01f444b2ce)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-01f444b2ce advisory. Automatic update for cri-o1.31-1.31.13-1.fc44. Changelog Thu Oct 2 2025 Bradley G Smith - 1.31.13-1 - Update to release v1.31.13 - Resolves:...

Fedora 44 : cri-o1.34 (2025-2498892c57)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2498892c57 advisory. Automatic update for cri-o1.34-1.34.1-1.fc44. Changelog Thu Oct 2 2025 Bradley G Smith - 1.34.1-1 - Update to release v1.34.1 - Resolves: rhbz233335...

NewStart CGSL MAIN 6.06 : neod Multiple Vulnerabilities (NS-SA-2025-0234)

The remote NewStart CGSL host, running version MAIN 6.06, has neod packages installed that are affected by multiple vulnerabilities: - containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root...

CVE-2025-22872 affecting package cri-tools for versions less than 1.32.0-2

CVE-2025-22872 affecting package cri-tools for versions less than 1.32.0-2. A patched version of the package is available...

Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

...

GO-2025-3897 CRI-O has Potential High Memory Consumption from File Read in github.com/cri-o/cri-o

CRI-O has Potential High Memory Consumption from File Read in github.com/cri-o/cri-o...

AZL-66728 CVE-2025-58058 affecting package cri-o 1.30.1-1

xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...

CVE-2025-4437

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a hi...

CVE-2025-4437: Allocation of Resources Without Limits or Throttling

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a hi...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis, k8sgateway, ytt, smarter-device-manager, otel-cli, flux-helm-controller, snyk-cli, sqlexporter, k8ssandra-operator, gobump, lazygit, k3d, terraform-provider-sendgrid, argocd-image-updater, sqlexporter-fips, falcoctl-fips, kubernetes-dashboard-web-fip...