podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

SUSE CVE-2025-64432

KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: mockgen, manifest-tool, gptscript, yunikorn-web, grafana-pyroscope, helm-docs, sbom-convert, wait-for-port, xcover, kyverno-policy-reporter-ui, falco-no-driver, cloud-provider-azure, coredns, kyverno, kuberlr, certificate-transparency, helm-push, hey,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-file, sbom-convert,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: promxy, fluent-operator-fips, spire-controller-manager-fips, gpu-operator, spqr, nats, cert-manager-webhook-pdns, glow, terraform-provider-azuread, stakater-reloader-fips, yunikorn-web, doppler-kubernetes-operator, dex-k8s-authenticator,...