CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns-fips, crossplane-provider-aws-cloudwatchlogs, gomplate, crossplane-provider-aws-cloudfront-fips, openbao-fips, flux-kustomize-controller-fips, rclone, cloudbeat, terragrunt, gomplate-fips, crossplane-provider-aws-efs,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: json-exporter-fips, kubeflow-pipelines, percona-xtradb-cluster-operator, kubernetes-csi-driver-nfs, prometheus-fips, kserve-modelmesh-serving, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-cloudfront-fips, kubernetes-csi-livenessprobe-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: json-exporter-fips, kubeflow-pipelines, percona-xtradb-cluster-operator, kubernetes-csi-driver-nfs, prometheus-fips, kserve-modelmesh-serving, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-cloudfront-fips, kubernetes-csi-livenessprobe-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: json-exporter-fips, kubeflow-pipelines, kubernetes-csi-driver-nfs, prometheus-fips, kserve-modelmesh-serving, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-cloudfront-fips, kubernetes-csi-livenessprobe-fips, nfs-subdir-external-provisioner,...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, amazon-cloudwatch-agent, sqlexporter, bento, grafana-alloy, cluster-api-aws-controller, argo-events, opentelemetry-collector-contrib, splunk-otel-collector...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, amazon-cloudwatch-agent, sqlexporter, bento, grafana-alloy, cluster-api-aws-controller, argo-events, opentelemetry-collector-contrib, splunk-otel-collector...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, splunk-otel-collector-fips, dapr, argo-events-fips, jitsucom-bulker, amazon-cloudwatch-agent-fips, cluster-api-aws-controller-fips, sqlexporter-fips, splunk-otel-collector, bento, dapr-fips, vault-fips, grafana-alloy, sqlexporter,...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, splunk-otel-collector-fips, dapr, argo-events-fips, jitsucom-bulker, amazon-cloudwatch-agent-fips, cluster-api-aws-controller-fips, sqlexporter-fips, splunk-otel-collector, bento, dapr-fips, vault-fips, grafana-alloy, sqlexporter,...

EUVD-2013-5040

Malware in sbrugna...

EUVD-2013-5770

Malware in sbrugna...

EUVD-2024-20948

Malicious code in bioql PyPI...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: docker-cli, nri-f5, nova, trivy, envconsul, yunikorn-k8shim, ko, kuberlr, cluster-api-provider-vsphere, fulcio, kubernetes-dashboard-api, opentofu, kyverno-notation-aws, kubernetes-dashboard, neuvector-sigstore-interface, clickhouse-operator, azure-service-operator,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: docker-cli, nri-f5, nova, trivy, envconsul, yunikorn-k8shim, ko, kuberlr, cluster-api-provider-vsphere, fulcio, kubernetes-dashboard-api, opentofu, kyverno-notation-aws, kubernetes-dashboard, neuvector-sigstore-interface, clickhouse-operator, azure-service-operator,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, prometheus, containerd, tkn, kubernetes-csi-driver-nfs, mockgen, step-kms-plugin, rclone, kube-logging-operator, prometheus-operator, nri-consul, nodetaint, cni-plugins, kubernetes-csi-driver-hostpath, kuberlr, azuredisk-csi, gobuster, flux-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: grafana-operator, kserve-rest-proxy, confluent-common-docker, karpenter-fips, karma-fips, vault-k8s, sftpgo-plugin-geoipfilter, gostatsd, terraform-provider-tls-fips, prometheus-adapter, blob-csi-fips, nvidia-nsight-compute-12.8, local-path-provisioner,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, redka, kubernetes-csi-livenessprobe-fips, hugo-extended, nfs-subdir-external-provisioner, prometheus-operator, terragrunt, git-credential-oauth, flux-image-reflector-controller-fips, amass, eksctl, sftpgo-plugin-kms, spicedb,...

CVE-2025-26521 Apache CloudStack: CKS cluster in project exposes user API keys

When an Apache CloudStack user-account creates a CKS-based Kubernetes cluster in a project, the API key and the secret key of the 'kubeadmin' user of the caller account are used to create the secret config in the CKS-based Kubernetes cluster. A member of the project who can access the CKS-based...

CVE-2013-5936

The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 allows remote attackers to obtain sensitive information about 1 runtime activity, 2 network configuration, 3 user sessions, 4 the memcache interface, and 5 the REST interface via API calls suc...

CVE-2013-5935

The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 does not properly restrict the set of network interfaces that can receive API calls, which makes it easier for remote attackers to obtain access by sending network traffic from an unintended...

CVE-2013-5200

The 1 REST and 2 memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote attackers to obtain sensitive information or modify data via an API call...