EUVD-2022-2051

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: cert-manager, swagger, glow, knative-serving, kyverno-notation-aws, spark-operator, tekton-pipelines, regclient, conftest, docker-cli-buildx, containerd, caddy, tekton-chains, ini-file, kubecolor, clickhouse-operator, timescaledb-tune, cg, src, harbor-registry, fzf,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: mattmoor-chainit, knative-serving, shfmt, knative-eventing, secrets-store-csi-driver-fips, custom-pod-autoscaler-operator, karpenter-fips, prometheus-process-exporter, pvc-autoresizer, vexctl, nats, vault-k8s, hivemind, nvidia-nsight-compute-12.8, bank-vaults,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: mattmoor-chainit, knative-serving, shfmt, knative-eventing, secrets-store-csi-driver-fips, custom-pod-autoscaler-operator, karpenter-fips, prometheus-process-exporter, pvc-autoresizer, vexctl, nats, vault-k8s, hivemind, nvidia-nsight-compute-12.8, bank-vaults,...

SUSE CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, kubernetes-dashboard, tw, crossplane-provider-azure-authorization, podman, eksctl, kaniko, chezmoi, kubescape, crossplane-provider-aws-kinesis, grafana-operator, flannel, cert-manager-istio-csr, frp, crossplane-provider-azure-managedidentity,...

CVE-2022-31077

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message response from KubeEdge can crash the CSI Driver controller server by triggering a nil-pointer dereference panic. As a...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, rancher-agent...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: syft, dynamic-localpv-provisioner, envoy-ratelimit-fips, kube-metrics-adapter, conftest, docker-compose, sigstore-scaffolding, multus-cni-fips, kube-fluentd-operator, crossplane-provider-azure, helm-operator-fips, flux-source-controller, vertical-pod-autoscaler-fips,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, kubecolor, terraform-provider-aws, boring-registry, kyverno-policy-reporter-ui, kubernetes-dashboard, delve, supercronic, kaniko, chezmoi, kubescape, grafana-operator, flannel, pulumi-language-dotnet, crane, frp, kind, nri-cassandra, nri-f5,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, kubecolor, boring-registry, delve, elvish, fscrypt, ini-file, supercronic, podman, kaniko, grafana-operator, flannel, crane, frp, kind, nri-cassandra, nri-f5, kube-logging-operator, runc, extism, descheduler, local-static-provisioner, s5cmd,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, crossplane-provider-azure, govulncheck, direnv, kubeflow-katib, nri-prometheus, vite, hello-world-golang, kubernetes-dashboard, oras, vt-cli, metallb, gosu, kubeflow-pipelines, delve, vexctl, minio, amass, terraform, dataplaneapi,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, crossplane-provider-azure, govulncheck, direnv, kubeflow-katib, nri-prometheus, vite, hello-world-golang, kubernetes-dashboard, oras, vt-cli, metallb, gosu, kubeflow-pipelines, delve, vexctl, minio, amass, terraform, dataplaneapi,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: kubernetes, rancher-fleet, kubernetes-dns-node-cache, aws-efs-csi-driver, kubernetes-csi-driver-nfs, spark-operator, emissary, kapp, kubernetes-csi-driver-hostpath, local-static-provisioner, argo-rollouts, vcluster, nodetaint, yunikorn-k8shim, ip-masq-agent,...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...