EUVD-2022-2051

Malicious code in bioql PyPI...

EUVD-2023-2145

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: nri-memcached, kubecolor, steampipe, nri-consul, cluster-api, gatekeeper, wgcf, gobump, cluster-api-provider-vsphere, rclone, kor, nova, rabbitmq-cluster-operator, rancher-agent, helm-operator, contour, dragonfly-operator, envconsul, kubernetes-dashboard-auth, glow,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kube-vip, dagdotdev, vault-benchmark, k8sgpt-operator, sftpgo-plugin-geoipfilter, addon-resizer, container-object-storage-interface, git-lfs, lvm-driver, custom-pod-autoscaler-operator, kube-vip-cloud-provider, cloud-provider-aws, vexctl, php-fpmexporter,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: wazero-fips, cluster-api, yace-fips, nvidia-nsight-compute-12.9, nvidia-nsight-compute-13.0, eks-distro-fips, gostatsd, etcd-fips, prometheus-adapter, consul-fips, grafana-operator, vault-benchmark, kuberay-operator, blob-csi-fips, dagdotdev,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: wazero-fips, cluster-api, yace-fips, nvidia-nsight-compute-12.9, nvidia-nsight-compute-13.0, eks-distro-fips, gostatsd, etcd-fips, prometheus-adapter, consul-fips, grafana-operator, vault-benchmark, kuberay-operator, blob-csi-fips, dagdotdev,...

SUSE CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...

GHSA-4X4M-3C2P-QPPC vulnerabilities

Vulnerabilities for packages: rancher-webhook, nodetaint, vcluster, local-static-provisioner, ip-masq-agent, argo-rollouts, k8ssandra-client, kubernetes, kubernetes-csi-driver-hostpath, mesosphere-vsphere-csi, rancher-system-agent, yunikorn-k8shim, kubernetes-csi-driver-nfs, kapp, emissary,...

CVE-2025-58061 OpenEBS Local PV RawFile persistent volume data is world readable

OpenEBS Local PV RawFile allows dynamic deployment of Stateful Persistent Node-Local Volumes & Filesystems for Kubernetes. Prior to version 0.10.0, persistent volume data is world readable and that would allow non-privileged users to access sensitive data such as databases of k8s workload. The...

PT-2025-42783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the stm32-csi driver where a memory dereference occurs before a NULL check within the stm32 csi start function. Specifically, csidev-s subdev is...

MAL-2025-11046 Malicious code in @zalastax/nolb-csi (npm)

The package @zalastax/nolb-csi was found to contain malicious code...

Malicious code in @zalastax/nolb-csi (npm)

The package @zalastax/nolb-csi was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nri-memcached, bazelisk, steampipe, prometheus-mongodb-exporter, hugo-fips, ingress-nginx-controller, db-operator, kiam, flux-kustomize-controller, cortex-fips, eks-distro-fips, rancher-fleet-fips, docker-cli-fips, helm-operator, spire-server, dbmate,...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: trufflehog, tailscale, kubernetes-dashboard-api, wave, cadvisor, sriov-network-device-plugin, grafana-operator, openbao-k8s, crossplane-provider-aws-elasticache, yunikorn-k8shim, kubewatch, metallb, kubernetes-dns-node-cache, spegel, rancher-webhook,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-fleet, mesosphere-vsphere-csi, rancher-system-agent, yunikorn-k8shim, emissary, vcluster, docker-machine-driver-harvester, cloud-provider-gcp-cloud-controller-manager...