CVE-2025-69720

CVE-2025-69720: ncurses infocmp -i Stack Buffer Overflow CWE-121 Reporter: Yixuan Cao Shenzhen University, [email protected] Environment Host: openEuler 22.03 LTS Linux aarch64 Toolchain: system clang 12.0.1 + AddressSanitizer Source: ncurses-6.4 and ncurses-6.5 prior to patch 20251213 Summa...

espectre

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

GO-2026-6889 vulnerabilities

Vulnerabilities for packages: kuberay-operator, cert-manager-istio-csr, mariadb-operator, percona-server-mongodb-operator, cert-manager-webhook-pdns, cert-manager-cmctl, aws-privateca-issuer, step-issuer, cert-manager-csi-driver...

CLEANSTART-2026-YF22424 Security fix for GHSA-hfvc-g4fc-pqhx applied in: prometheus-alertmanager-fips 0.32.0-r0, traefik 2.11.41-r1, etcd 3.6.9-r0, gatekeeper-fips 3.20.1-r1, grafana 12.3.6-r1, minio 0.20251015.172955-r2, gatekeeper 3.20.1-r1, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0, loki 3.6.10-r1

GHSA-hfvc-g4fc-pqhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WQ89744 Security fix for GHSA-mh2q-q3fh-2475 applied in: consul 1.22.7-r0, consul 1.22.7-r2, gatekeeper 3.20.1-r1, gatekeeper-fips 3.20.1-r1, minio 0.20251015.172955-r2, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0

GHSA-mh2q-q3fh-2475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OS27290 Security fix for GHSA-p77j-4mvh-x3m3 applied in: consul 1.22.5-r1, gatekeeper 3.20.1-r1, gatekeeper-fips 3.20.1-r1, minio 0.20251015.172955-r1, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0

GHSA-p77j-4mvh-x3m3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JL69515 security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes

Security vulnerability affects the secrets-store-csi-driver-fips package. A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes...

GHSA-8RVJ-MM4H-C258 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator-fips, cert-manager-google-cas-issuer, redpanda-operator, cert-manager-cmctl-fips, kuberay-operator-fips, percona-xtradb-cluster-operator-fips, step-issuer, cert-manager-istio-csr-fips, aws-privateca-issuer-fips, cert-manager-cmctl,...

Security Bulletin: Nomad vulnerable to cross-namespace information disclosure in multiple endpoints

Summary HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API endpoints that may allow an authenticated user with read permissions in one namespace to view information about objects in other namespaces. This vulnerability...

CLEANSTART-2026-DQ69074 Security fix for GHSA-5cv4-jp36-h3mw applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, haproxy-ingress 0.13.19-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, kumactl 2.14.0-r1, aws-network-policy-agent 1.3.5-r1, smarter-device-manager 1.20.11-r1, smarter-device-manager 1.20.11-r2, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-5cv4-jp36-h3mw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GY60035 Security fix for GHSA-qpw4-5x99-6vjp applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-qpw4-5x99-6vjp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QL47150 Security fix for GHSA-9m57-25v3-79x9 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-9m57-25v3-79x9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IH80473 Security fix for GHSA-45gg-vh54-h5m9 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-45gg-vh54-h5m9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OC21392 Security fix for GHSA-78mq-xcr3-xm33 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-78mq-xcr3-xm33 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CM19528 Security fix for GHSA-q4h4-gmj2-qvw2 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-q4h4-gmj2-qvw2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OK40538 Security fix for GHSA-w879-237q-wc7r applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-w879-237q-wc7r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MJ05822 Security fix for GHSA-jppx-rxg9-jmrx applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-jppx-rxg9-jmrx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VH12649 Security fix for GHSA-89gr-r52h-f8rx applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-89gr-r52h-f8rx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TE17552 Security fix for GHSA-x527-x647-q7gg applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-x527-x647-q7gg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BC10849 Security fix for GHSA-rm3j-f69w-wqmq applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-rm3j-f69w-wqmq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...