CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: istio-fips, amazon-k8s-cni-fips, kuma, datadog-agent-fips, podman, datadog-agent, istio, rootlesskit-fips, multus-cni-fips, rke2-runtime, calico, buildkitd, nerdctl-fips, buildah, k3s, rootlesskit, calico-fips, multus-cni, buildkitd-fips, containerd-fips, flannel,...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: istio-fips, amazon-k8s-cni-fips, kuma, datadog-agent-fips, podman, datadog-agent, istio, rootlesskit-fips, multus-cni-fips, rke2-runtime, calico, buildkitd, nerdctl-fips, buildah, k3s, rootlesskit, calico-fips, multus-cni, buildkitd-fips, containerd-fips, flannel,...

EUVD-2022-54538

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

EUVD-2022-1122

Malicious code in bioql PyPI...

EUVD-2024-1115

Malicious code in bioql PyPI...

EUVD-2023-2890

Malicious code in bioql PyPI...

EUVD-2022-6001

Malicious code in bioql PyPI...

Malicious code in calico-experience (npm)

The package calico-experience was found to contain malicious code...

MAL-2025-16450 Malicious code in calico-experience (npm)

The package calico-experience was found to contain malicious code...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, rancher-system-agent, node-feature-discovery, rancher-agent, rancher, vcluster, azuredisk-csi, calico, emissary, rancher-fleet, yunikorn-k8shim, azurefile-csi, argo-cd, cloud-provider-gcp-cloud-controller-manager,...

GHSA-HJ2P-8WJ8-PFQ4 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, rancher-system-agent, node-feature-discovery, rancher-agent, rancher, vcluster, azuredisk-csi, calico, emissary, rancher-fleet, yunikorn-k8shim, azurefile-csi, argo-cd, cloud-provider-gcp-cloud-controller-manager,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, node-feature-discovery, rancher-system-agent, yunikorn-k8shim-fips, cloud-provider-gcp-cloud-controller-manager-fips, emissary, yunikorn-k8shim, blob-csi-fips, cloud-provider-gcp-cloud-controller-manager, argo-cd, cluster-autoscaler-fips,...

Photon OS 5.0: Calico PHSA-2024-5.0-0428

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0428. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2022-49697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a...

CVE-2022-49697

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

UBUNTU-CVE-2022-49697

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

CVE-2022-49697 bpf: Fix request_sock leak in sk lookup helpers

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

CVE-2022-49697

CVE-2022-49697 concerns a leak in the Linux kernel caused by a BPF lookup path that could leak a request_sock. The issue occurs when a BPF program performs a socket lookup that takes a refcnt on the socket and, after locating the child request_socket, returns the parent LISTEN socket via sk_to_fu...

CVE-2022-49697 bpf: Fix request_sock leak in sk lookup helpers

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: stakater-reloader, cortex, mongo-tools, kubevela, nri-rabbitmq, terraform, kubeflow-pipelines, k3d, docker-cli, hubble-ui, nri-mongodb, supercronic, spark-operator, datadog-agent, terraform-docs, vite, aws-flb-cloudwatch, nri-kafka, oras, chartmuseum, fq,...