CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, zabbix-agent2-fips, gatus-fips, longhorn-engine, kube-conformance, prometheus-beat-exporter-fips, consul-k8s-fips, livekit-cli, karpenter, crossplane-provider-aws-sns, ctop, kubernetes-csi-external-snapshotter,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, zabbix-agent2-fips, gatus-fips, longhorn-engine, kube-conformance, prometheus-beat-exporter-fips, consul-k8s-fips, livekit-cli, karpenter, crossplane-provider-aws-sns, ctop, kubernetes-csi-external-snapshotter,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, zabbix-agent2-fips, gatus-fips, fixuid, longhorn-engine, kube-conformance, prometheus-beat-exporter-fips, consul-k8s-fips, livekit-cli, karpenter, crossplane-provider-aws-sns, yq-fips, ctop, kubernetes-csi-external-snapshotter,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, zabbix-agent2-fips, gatus-fips, fixuid, longhorn-engine, kube-conformance, prometheus-beat-exporter-fips, consul-k8s-fips, livekit-cli, karpenter, crossplane-provider-aws-sns, yq-fips, ctop, kubernetes-csi-external-snapshotter,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, zabbix-agent2-fips, gatus-fips, fixuid, longhorn-engine, kube-conformance, prometheus-beat-exporter-fips, consul-k8s-fips, livekit-cli, karpenter, crossplane-provider-aws-sns, yq-fips, ctop, kubernetes-csi-external-snapshotter,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, zabbix-agent2-fips, gatus-fips, longhorn-engine, kube-conformance, prometheus-beat-exporter-fips, consul-k8s-fips, livekit-cli, karpenter, crossplane-provider-aws-sns, kubernetes-csi-external-snapshotter, sftpgo-plugin-pubsub,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, zabbix-agent2-fips, gatus-fips, fixuid, longhorn-engine, kube-conformance, prometheus-beat-exporter-fips, consul-k8s-fips, livekit-cli, karpenter, crossplane-provider-aws-sns, yq-fips, ctop, kubernetes-csi-external-snapshotter,...

Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access

Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ChatGPT authentication tokens. One of the extensions in question is Amazon Ads Blocker ID: pnpchphmplpdimbllknjoiopmfphellj, which...

Ex-Google Engineer Convicted for Stealing AI Secrets for China Startup

A former Google engineer accused of stealing thousands of the company's confidential documents to build a startup in China has been convicted in the U.S., the Department of Justice DoJ announced Thursday. Linwei Ding aka Leon Ding, 38, was convicted by a federal jury on seven counts of economic...

Unspecified Vulnerability in Oracle MySQL (CNVD-2026-16627)

Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in Oracle MySQL for MySQL Server and MySQL Cluster, which can be exploited by attackers to cause a denial of service...

CVE-2026-24748

Kargo manages and automates the promotion of software artifacts. Prior to versions 1.8.7, 1.7.7, and 1.6.3, a bug was found with authentication checks on the GetConfig API endpoint. This allowed unauthenticated users to access this endpoint by specifying an Authorization header with any non-empty...

Important: Red Hat Security Advisory: RHACS 4.8.8 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

CVE-2026-24748

Kargo manages and automates the promotion of software artifacts. Prior to versions 1.8.7, 1.7.7, and 1.6.3, a bug was found with authentication checks on the GetConfig API endpoint. This allowed unauthenticated users to access this endpoint by specifying an Authorization header with any non-empty...

CVE-2026-22039 Kyverno Cross-Namespace Privilege Escalation via Policy apiCall

Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have a critical authorization boundary bypass in namespaced Kyverno Policy apiCall. The resolved urlPath is executed using the Kyverno admission controller ServiceAccount, with no...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005107 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2dioendiowrite...

RHEL 9 : fence-agents (RHSA-2026:1330)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1330 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

ROS-20260126-73-0034

A vulnerability in the ocfs2 component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.1 security update

Red Hat Advanced Cluster Management for Kubernetes 2.15 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. Red Hat Advanced Cluster Management for Kubernetes 2.15 images Red Hat Advanced Cluster Management for Kubernetes provides...

Moderate: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.1 security update

The multicluster engine for Kubernetes 2.10 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.10 images The multicluster engine for Kubernetes provides the foundational components that a...