EUVD-2023-2890

Malicious code in bioql PyPI...

EUVD-2024-1115

Malicious code in bioql PyPI...

Malicious code in calico-experience (npm)

The package calico-experience was found to contain malicious code...

MAL-2025-16450 Malicious code in calico-experience (npm)

The package calico-experience was found to contain malicious code...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, vcluster, yunikorn-k8shim, emissary, rancher-fleet, kubernetes-csi-driver-hostpath, rancher-system-agent, mesosphere-vsphere-csi, docker-machine-driver-harvester...

GHSA-HJ2P-8WJ8-PFQ4 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, vcluster, yunikorn-k8shim, emissary, rancher-fleet, kubernetes-csi-driver-hostpath, rancher-system-agent, mesosphere-vsphere-csi, docker-machine-driver-harvester...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: azurefile-csi-fips, argo-cd-fips, kubernetes-csi-driver-hostpath, yunikorn-k8shim, azurefile-csi, blob-csi-fips, mesosphere-vsphere-csi, calico, blob-csi, rancher-agent, cloud-provider-gcp-cloud-controller-manager, azuredisk-csi, rancher-fleet, rancher-fleet-fips,...

Photon OS 5.0: Calico PHSA-2024-5.0-0428

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0428. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2022-49697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a...

CVE-2022-49697

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

UBUNTU-CVE-2022-49697

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

CVE-2022-49697 bpf: Fix request_sock leak in sk lookup helpers

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

CVE-2022-49697

CVE-2022-49697 concerns a leak in the Linux kernel caused by a BPF lookup path that could leak a request_sock. The issue occurs when a BPF program performs a socket lookup that takes a refcnt on the socket and, after locating the child request_socket, returns the parent LISTEN socket via sk_to_fu...

CVE-2022-49697 bpf: Fix request_sock leak in sk lookup helpers

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, stern, podman, rekor, fscrypt, mockgen, protoc-gen-go, containerd, libnvidia-container, kserve-modelmesh-serving, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: podman, fscrypt, mockgen, containerd, kserve-modelmesh-serving, gke-gcloud-auth-plugin, nri-prometheus, mage, yq, gobuster, sbom-scorecard, sftpgo-plugin-auth, kyverno-policy-reporter-kyverno-plugin, prometheus-alertmanager, cloudnative-pg, atlantis, cosign,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, grpcurl, ferretdb, dive, argo-workflows, nri-mongodb, local-path-provisioner, vault-k8s, paranoia, temporal-ui-server, wait-for-port, gke-gcloud-auth-plugin, sbomqs, nri-couchbase, pulumi-language-yaml, fuse-overlayfs-snapshotter,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: tigera-operator, dive, hubble-ui-backend-fips, kube-state-metrics, kubeflow-katib, shfmt, prometheus-blackbox-exporter, vexctl, kubernetes-dashboard-metrics-scraper, grype, prometheus-pushgateway, prometheus-mysqld-exporter, aws-flb-kinesis, kube-logging-operator,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: tigera-operator, dive, hubble-ui-backend-fips, kube-state-metrics, kubeflow-katib, shfmt, prometheus-blackbox-exporter, vexctl, kubernetes-dashboard-metrics-scraper, grype, prometheus-pushgateway, prometheus-mysqld-exporter, aws-flb-kinesis, kube-logging-operator,...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, stern, podman, rekor, fscrypt, mockgen, protoc-gen-go, containerd, libnvidia-container, kserve-modelmesh-serving, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...