GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: nerdctl, aws-flb-kinesis-fips, nri-couchbase-fips, mongodb-kubernetes-operator-fips, promxy-fips, kor, cert-manager-fips, spqr, prometheus-nats-exporter-fips, litestream, harbor-scanner-trivy-fips, openbao-k8s-fips, vertical-pod-autoscaler-fips,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: nerdctl, aws-flb-kinesis-fips, mockgen, nri-couchbase-fips, mongodb-kubernetes-operator-fips, promxy-fips, kor, cert-manager-fips, spqr, prometheus-nats-exporter-fips, litestream, harbor-scanner-trivy-fips, openbao-k8s-fips, vertical-pod-autoscaler-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-flb-kinesis-fips, mockgen, nri-couchbase-fips, mongodb-kubernetes-operator-fips, promxy-fips, kor, cert-manager-fips, spqr, prometheus-nats-exporter-fips, litestream, harbor-scanner-trivy-fips, openbao-k8s-fips, vertical-pod-autoscaler-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-flb-kinesis-fips, mockgen, nri-couchbase-fips, mongodb-kubernetes-operator-fips, promxy-fips, kor, cert-manager-fips, spqr, prometheus-nats-exporter-fips, litestream, harbor-scanner-trivy-fips, openbao-k8s-fips, vertical-pod-autoscaler-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nerdctl, aws-flb-kinesis-fips, mockgen, nri-couchbase-fips, mongodb-kubernetes-operator-fips, promxy-fips, kor, cert-manager-fips, spqr, prometheus-nats-exporter-fips, litestream, harbor-scanner-trivy-fips, openbao-k8s-fips, vertical-pod-autoscaler-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-flb-kinesis-fips, mongodb-kubernetes-operator-fips, promxy-fips, kor, cert-manager-fips, spqr, prometheus-nats-exporter-fips, litestream, harbor-scanner-trivy-fips, openbao-k8s-fips, vertical-pod-autoscaler-fips, kubernetes-dns-node-cache-fips, sops,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, nerdctl, aws-flb-kinesis-fips, cert-exporter-fips, kor, secrets-store-csi-driver-provider-azure, certificate-transparency-fips, sops, terraform-provider-sendgrid-fips, aws-efs-csi-driver, flux-notification-controller,...

Apache Ambari: authenticated users could perform command injection to perform RCE

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

GHSA-RGHC-9FHX-H32M Apache Ambari: authenticated users could perform command injection to perform RCE

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

CVE-2023-50379

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

Code injection

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

CVE-2023-50379 Apache Ambari: authenticated users could perform command injection to perform RCE

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

CVE-2023-50379 Apache Ambari: authenticated users could perform command injection to perform RCE

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

CVE-2023-50379

CVE-2023-50379 affects Apache Ambari prior to 2.7.8, enabling an authenticated attacker to inject malicious code by manipulating a request and achieve root access on the cluster’s main host. The vulnerability stems from a code-injection flaw in Ambari’s request handling, with impact described as ...

Low: Red Hat Security Advisory: OpenShift Virtualization 2.4.2 Images

Red Hat OpenShift Virtualization release 2.4.2 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a...