GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: promxy, fluent-operator-fips, spire-controller-manager-fips, gpu-operator, spqr, nats, cert-manager-webhook-pdns, glow, terraform-provider-azuread, stakater-reloader-fips, yunikorn-web, doppler-kubernetes-operator, dex-k8s-authenticator,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: promxy, fluent-operator-fips, spire-controller-manager-fips, gpu-operator, spqr, nats, cert-manager-webhook-pdns, glow, terraform-provider-azuread, stakater-reloader-fips, yunikorn-web, doppler-kubernetes-operator, dex-k8s-authenticator,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: promxy, fluent-operator-fips, spire-controller-manager-fips, gpu-operator, spqr, nats, cert-manager-webhook-pdns, glow, terraform-provider-azuread, stakater-reloader-fips, yunikorn-web, doppler-kubernetes-operator, dex-k8s-authenticator,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: promxy, fluent-operator-fips, spire-controller-manager-fips, gpu-operator, spqr, nats, cert-manager-webhook-pdns, glow, terraform-provider-azuread, stakater-reloader-fips, yunikorn-web, doppler-kubernetes-operator, dex-k8s-authenticator,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: promxy, fluent-operator-fips, spire-controller-manager-fips, gpu-operator, spqr, nats, cert-manager-webhook-pdns, glow, terraform-provider-azuread, stakater-reloader-fips, yunikorn-web, doppler-kubernetes-operator, dex-k8s-authenticator,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: promxy, fluent-operator-fips, spire-controller-manager-fips, gpu-operator, spqr, nats, cert-manager-webhook-pdns, glow, terraform-provider-azuread, stakater-reloader-fips, yunikorn-web, doppler-kubernetes-operator, prometheus-process-exporter-fips, newrelic-nri-stats...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: promxy, fluent-operator-fips, spire-controller-manager-fips, gpu-operator, spqr, nats, cert-manager-webhook-pdns, glow, terraform-provider-azuread, stakater-reloader-fips, yunikorn-web, doppler-kubernetes-operator, dex-k8s-authenticator,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: promxy, fluent-operator-fips, spire-controller-manager-fips, gpu-operator, spqr, nats, cert-manager-webhook-pdns, glow, terraform-provider-azuread, stakater-reloader-fips, yunikorn-web, doppler-kubernetes-operator, dex-k8s-authenticator,...

Astra Linux – Vulnerability in libpod

There is a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file is stored in a Secret or a ConfigMap volume, and such volumes contain symbolic links to host file paths. In a successful attack, the attacker can control only the target...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

EUVD-2024-1950

Malicious code in bioql PyPI...

EUVD-2025-27030

Malicious code in bioql PyPI...

CLSA-2025-1759505734 podman: Fix of CVE-2025-9566

CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: bank-vaults, nats, gostatsd, gitsign, docker-credential-ecr-login, php-fpmexporter, mattmoor-chainit, shfmt, kubernetes-csi-node-driver-registrar-fips, newrelic-nri-statsd, octo-sts, gcp-compute-persistent-disk-csi-driver-fips, vexctl, pvc-autoresizer,...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...