Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, k8sgpt-operator, wgcf, vault-env, go-licenses, envconsul, cosign, mods, go-tools, gke-gcloud-auth-plugin, falco-exporter, skopeo, harbor-registry, kiali, mockery, xeol, iptables-wrappers, smarter-device-manager,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: elvish, manifest-tool, scuttle, conftest-fips, terraform-provider-random-fips, oras-fips, argo-cd, whereabouts, stern, vault-k8s, openbao-k8s-fips, secrets-store-csi-driver, kaf, yunikorn-k8shim-fips, controller-gen, kubeflow-katib, spiffe-helper-fips, s5cmd,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: elvish, manifest-tool, scuttle, conftest-fips, terraform-provider-random-fips, oras-fips, argo-cd, whereabouts, stern, vault-k8s, openbao-k8s-fips, secrets-store-csi-driver, kaf, yunikorn-k8shim-fips, controller-gen, kubeflow-katib, spiffe-helper-fips, s5cmd,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: elvish, manifest-tool, scuttle, conftest-fips, terraform-provider-random-fips, oras-fips, argo-cd, whereabouts, stern, vault-k8s, openbao-k8s-fips, secrets-store-csi-driver, kaf, yunikorn-k8shim-fips, controller-gen, kubeflow-katib, spiffe-helper-fips, s5cmd,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: elvish, manifest-tool, scuttle, conftest-fips, terraform-provider-random-fips, oras-fips, argo-cd, whereabouts, stern, vault-k8s, openbao-k8s-fips, secrets-store-csi-driver, kaf, yunikorn-k8shim-fips, controller-gen, kubeflow-katib, spiffe-helper-fips, s5cmd,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: elvish, manifest-tool, scuttle, conftest-fips, terraform-provider-random-fips, oras-fips, argo-cd, whereabouts, stern, vault-k8s, openbao-k8s-fips, secrets-store-csi-driver, kaf, yunikorn-k8shim-fips, controller-gen, kubeflow-katib, spiffe-helper-fips, s5cmd,...