165 matches found
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: elvish, manifest-tool, scuttle, conftest-fips, terraform-provider-random-fips, oras-fips, argo-cd, whereabouts, stern, vault-k8s, openbao-k8s-fips, secrets-store-csi-driver, kaf, yunikorn-k8shim-fips, controller-gen, kubeflow-katib, spiffe-helper-fips, s5cmd,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: elvish, manifest-tool, scuttle, conftest-fips, terraform-provider-random-fips, oras-fips, argo-cd, whereabouts, stern, vault-k8s, openbao-k8s-fips, secrets-store-csi-driver, kaf, yunikorn-k8shim-fips, controller-gen, kubeflow-katib, spiffe-helper-fips, s5cmd,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: elvish, manifest-tool, scuttle, conftest-fips, terraform-provider-random-fips, oras-fips, argo-cd, whereabouts, stern, vault-k8s, openbao-k8s-fips, secrets-store-csi-driver, kaf, yunikorn-k8shim-fips, controller-gen, kubeflow-katib, spiffe-helper-fips, s5cmd,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: elvish, manifest-tool, scuttle, conftest-fips, terraform-provider-random-fips, oras-fips, argo-cd, whereabouts, stern, vault-k8s, openbao-k8s-fips, secrets-store-csi-driver, kaf, yunikorn-k8shim-fips, controller-gen, kubeflow-katib, spiffe-helper-fips, s5cmd,...
Astra Linux – Vulnerability in libpod
There is a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file is stored in a Secret or a ConfigMap volume, and such volumes contain symbolic links to host file paths. In a successful attack, the attacker can control only the target...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
EUVD-2025-27030
Malicious code in bioql PyPI...
EUVD-2024-1950
Malicious code in bioql PyPI...
CLSA-2025-1759505734 podman: Fix of CVE-2025-9566
CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-geoipfilter, newrelic-nri-statsd, vault-k8s, openbao-k8s-fips, vexctl, git-lfs, rancher-machine, lvm-driver, nats, kubeflow-katib, octo-sts, mongodb-kubernetes-operator, azurefile-csi-fips, stakater-reloader, kube-vip, nvidia-nsight-compute-12.9,...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
Directory Traversal
github.com/containers/podman is vulnerable to Directory Traversal.The vulnerability is due to a lack of symlink canonicalization and host-path validation; this allows an attacker who supplies a malicious Kubernetes YAML to cause podman to write the ConfigMap/Secret data contents are defined by th...
Linux Distros Unpatched Vulnerability : CVE-2025-9566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap...