Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.13.59 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.59 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

The vulnerability of the gf_ac4parser_bs function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure or disclose protected information.

The vulnerability of the gfac4parserbs function in the MP4Box utility of the GPAC multimedia platform is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or disclose protected information...

NVIDIA Container Toolkit 代码问题漏洞

NVIDIA Container Toolkit is a container toolkit from NVIDIA, Inc. It allows users to build and run GPU-accelerated containers. A code issue vulnerability exists in NVIDIA Container Toolkit that stems from a container initialization hook flaw that could lead to elevation of privilege, data...

NVIDIA Container Toolkit 后置链接漏洞

NVIDIA Container Toolkit is a container toolkit introduced by NVIDIA for directly invoking GPU resources in containers, solving the problems of complex device access and insufficient resource isolation faced by traditional containerized GPU computing. NVIDIA Container Toolkit suffers from a...

SUSE SLES15: docker / docker-bash-completion / docker-fish-completion / etc (SUSE-SU-2025:02289-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02289-2 advisory. Update to Docker 28.2.2-ce bsc1243833, bsc1242114: - CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentia...

Amazon Linux 2023 : nvidia-container, nvidia-container-toolkit (ALAS2023NVIDIA-2025-125)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-125 advisory. Placeholder CVE. Details forthcoming CVE-2025-23266 Placeholder CVE. Details forthcoming CVE-2025-23267 Tenable has extracted the preceding description block directly from the tested...

Critical: libnvidia-container

Issue Overview: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data...

Critical: nvidia-container-toolkit

Issue Overview: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data...

NVIDIA Container Toolkit < 1.17.8 Multiple Vulnerabilities (July 2025)

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17.8. It is, therefore, affected by multiple vulnerabilities as referenced in the July 2025 advisory: - NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the...

SUSE CVE-2025-23267

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service...

MAL-2025-6119 Malicious code in pro-rhr-container (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec0b1a38dedf4534ebb29ea3d45af93b41e050a360c99c229eaaff93be82f775 The OpenSSF Package Analysis project identified 'pro-rhr-container' @...

Malicious code in pro-rhr-container (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec0b1a38dedf4534ebb29ea3d45af93b41e050a360c99c229eaaff93be82f775 The OpenSSF Package Analysis project identified 'pro-rhr-container' @...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.4 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.4 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

The vulnerability of the Portainer container management platform, related to insufficient protection of operational data, allows a hacker to gain access to confidential information.

The vulnerability of the Portainer container management platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

MAL-2025-5872 Malicious code in @gdcorp-commerce/cx-page-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7cfb33d83efc9598ba1eef7145194848746d40838198d981254b66fd6a88b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gdcorp-commerce/cx-page-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7cfb33d83efc9598ba1eef7145194848746d40838198d981254b66fd6a88b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.19.4 security and extras update

Red Hat OpenShift Container Platform release 4.19.4 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

Security Bulletin: NVIDIA Container Toolkit - July 2025

NVIDIA has released a software update for NVIDIA® Container Toolkit and GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product Security...

Vulnerability Mitigation System (VMS): LLM Agent and Evaluation Framework for Autonomous Penetration Testing

As the frequency of cyber threats increases, conventional penetration testing is failing to capture the entirety of todays complex environments. To solve this problem, we propose the Vulnerability Mitigation System VMS, a novel agent based on a Large Language Model LLM capable of performing...

PT-2025-29903

Name of the Vulnerable Software and Affected Versions NVIDIA Container Toolkit affected versions not specified Description The NVIDIA Container Toolkit contains an issue in the update-ldcache hook. An attacker could potentially cause a link following by using a specially crafted container image. ...