PT-2026-42306

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator-fips, opentelemetry-operator, percona-server-mongodb-operator, aws-privateca-issuer-fips, cert-manager-openshift-routes, mariadb-operator-fips, cert-manager-cmctl-fips, cert-manager-openshift-routes-fips, step-issuer-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: hydra, nats-top, local-path-provisioner, rancher-telemetry, litestream, dbmate, percona-server-mongodb-operator, sftpgo-plugin-auth, aactl, descheduler, amazon-cloudwatch-agent-operator, terraform-provider-time, wgcf, chisel, crossplane-provider-sql,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: dbmate, percona-server-mongodb-operator, aactl, kubernetes-csi-external-attacher, cosign, kapp, hivemind, rancher-system-upgrade-controller, licenseclassifier, lvm-driver, container-object-storage-interface, cri-tools, kserve-modelmesh-serving,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: hydra, nats-top, local-path-provisioner, rancher-telemetry, litestream, dbmate, percona-server-mongodb-operator, sftpgo-plugin-auth, aactl, descheduler, amazon-cloudwatch-agent-operator, terraform-provider-time, wgcf, chisel, crossplane-provider-sql,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: fleet-server, logstash-exporter-fips, terraform-docs, knative-eventing, vault-fips, nerdctl-fips, kube-conformance, k6-operator, k6-fips, deck-fips, linkerd2-cni-plugin, nri-mongodb, go-licenses, kubernetes-csi-external-snapshotter-fips, cri-tools, step,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: fleet-server, logstash-exporter-fips, terraform-docs, knative-eventing, vault-fips, nerdctl-fips, kube-conformance, k6-operator, k6-fips, deck-fips, linkerd2-cni-plugin, nri-mongodb, go-licenses, kubernetes-csi-external-snapshotter-fips, cri-tools, step,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: fleet-server, logstash-exporter-fips, terraform-docs, knative-eventing, vault-fips, nerdctl-fips, kube-conformance, k6-operator, age, k6-fips, boringssl-fips-static, deck-fips, linkerd2-cni-plugin, nri-mongodb, go-licenses, kubernetes-csi-external-snapshotter-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: fleet-server, logstash-exporter-fips, terraform-docs, knative-eventing, vault-fips, nerdctl-fips, kube-conformance, k6-operator, age, k6-fips, boringssl-fips-static, deck-fips, linkerd2-cni-plugin, nri-mongodb, go-licenses, kubernetes-csi-external-snapshotter-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: fleet-server, logstash-exporter-fips, terraform-docs, knative-eventing, vault-fips, nerdctl-fips, kube-conformance, k6-operator, age, k6-fips, boringssl-fips-static, deck-fips, linkerd2-cni-plugin, nri-mongodb, go-licenses, kubernetes-csi-external-snapshotter-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: fleet-server, logstash-exporter-fips, terraform-docs, knative-eventing, vault-fips, nerdctl-fips, kube-conformance, k6-operator, age, k6-fips, boringssl-fips-static, deck-fips, linkerd2-cni-plugin, nri-mongodb, go-licenses, kubernetes-csi-external-snapshotter-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: fleet-server, terraform-docs, knative-eventing, vault-fips, nerdctl-fips, kube-conformance, k6-operator, k6-fips, deck-fips, go-licenses, kubernetes-csi-external-snapshotter-fips, cri-tools, step, nri-jmx, verticadb-operator-fips, cluster-autoscaler, external-dns,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter-fips, argo-workflows, logstash-exporter-fips, terraform-docs, aws-ebs-csi-driver, cri-tools, request-1279, crossplane-provider-azure-storage, step, kaniko, prometheus-node-exporter, kubernetes-dashboard-metrics-scraper, tkn, envoy-ratelimit,...

GHSA-RGHC-9FHX-H32M Apache Ambari: authenticated users could perform command injection to perform RCE

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

Apache Ambari: authenticated users could perform command injection to perform RCE

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

CVE-2023-50379

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

Code injection

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

CVE-2023-50379 Apache Ambari: authenticated users could perform command injection to perform RCE

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

CVE-2023-50379 Apache Ambari: authenticated users could perform command injection to perform RCE

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

CVE-2023-50379

The Apache Ambari management platform is vulnerable to a code injection flaw in versions prior to 2.7.8 . A Cluster Operator can exploit this vulnerability by manipulating requests to inject malicious code, potentially leading to root privileges over the cluster's main host and the execution of a...