8822 matches found
EUVD-2025-116492
Malicious code in astro-lynx-spectron-webdriver-cluster npm...
EUVD-2025-111130
Malicious code in mini-css-extract-plugin-orbit-meissa-cluster npm...
MAL-2025-146137 Malicious code in phenomic-passport-cluster-wezen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c559aa81b20a324d2c8a153bae73240e71880699bb53d81278aa3818e7a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143114 Malicious code in gulp-cluster-chalk-phoenix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113015
Malicious code in grus-ora-cosmiconfig-cluster npm...
EUVD-2025-115274
Malicious code in cluster-nodemon-hexo-umbra npm...
Malicious code in rate-limiter-ophiuchus-cluster-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef2e42187265b736b0de40047125658f11cf7cd3428bcaef718759b23c7991b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124856
Malicious code in miranda-umbriel-jasmine-cluster npm...
EUVD-2025-115196
Malicious code in command-meissa-config-cluster npm...
EUVD-2025-116535
Malicious code in arcturus-cluster-sagitta-algol npm...
PT-2025-46674
Name of the Vulnerable Software and Affected Versions Observability Operator affected versions not specified Description Incorrect privilege assignment occurs when the operator creates a ServiceAccount with ClusterRole privileges during the deployment of the namespace-scoped Custom Resource...
kernel: exfat: fix out-of-bounds access of directory entries
In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater than or equal to the cluster size, if startclu becomes an EOF clusteran invalid cluster due to file system corruption, then the...
Code Injection
Gardener Extensions is vulnerable to Code Injection. The vulnerability is due to improper handling of user-controlled input in Terraformer-based infrastructure provisioning across AWS, Azure, OpenStack, and GCP providers, which allows an attacker with administrative privileges in a Gardener proje...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update
Red Hat Advanced Cluster Management for Kubernetes 2.12 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. Red Hat Advanced Cluster Management for Kubernetes 2.12 images Red Hat Advanced Cluster Management for Kubernetes provides...
[SECURITY] Fedora 43 Update: python-cloudpickle-3.1.2-1.fc43
cloudpickle makes it possible to serialize Python constructs not supported by the default pickle module from the Python standard library. cloudpickle is especially useful for cluster computing where Python expressions are shipped over the network to execute on remote hosts, possibly close to the...
SUSE CVE-2025-62714
Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints e.g., /api/v1/secret, /api/v1/service did not...
Security Bulletin: Due to the use of helm, IBM Kubecost Self Hosted is affected by stack overflow and memory exhaustion
Summary helm is used by IBM Kubecost Self Hosted as part of the cluster-controller component CVE-2025-32387, CVE-2025-32386 Vulnerability Details CVEID:CVE-2025-32387 DESCRIPTION: Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990608)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990608 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: mount fails with buffer overflow in strlen Starting with kernel 5.11 built with...
Moderate: Red Hat Security Advisory: RHACS 4.7.8 security and bug fix update
Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...