CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: incert, envoy-ratelimit, nvidia-container-toolkit, buf, crossplane-provider-aws-sns, docker-compose, ini-file, local-path-provisioner, timoni, k3d, secrets-store-csi-driver, mailpit, kratos, cluster-autoscaler, opentelemetry-operator, timescaledb-parallel-copy,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: tfsec, aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, tempo, terragrunt-fips, crossplane-function-environment-configs-fips, gitaly, knative-client, terraform-provider-sendgrid-fips, authservice-fips, helm-fips, vault-env, crossplane-provider-aws-cloudwatchlogs...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: tfsec, aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, tempo, terragrunt-fips, crossplane-function-environment-configs-fips, knative-client, terraform-provider-sendgrid-fips, authservice-fips, helm-fips, vault-env, crossplane-provider-aws-cloudwatchlogs,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, gitlab-operator, cert-manager-google-cas-issuer, step-issuer-fips, cert-manager-cmctl, percona-xtradb-cluster-operator, aws-privateca-issuer-fips, percona-server-mongodb-operator, cert-manager-csi-driver-fips,...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-webhook-pdns, cert-manager-cmctl, step-issuer, mariadb-operator, opentelemetry-operator, cert-manager-csi-driver, aws-privateca-issuer, percona-server-mongodb-operator...

CLEANSTART-2026-MY73913 Security fixes for GHSA-R6J8-C6R2-37RR applied in versions: 4.12.1-r0

Security vulnerability affects the kubernetes-csi-driver-nfs package. This issue is resolved in later releases. See references for vulnerability details...

EUVD-2024-1746

Malicious code in bioql PyPI...

EUVD-2023-1539

Malicious code in bioql PyPI...

EUVD-2022-6183

Malicious code in bioql PyPI...

EUVD-2022-0837

Malicious code in bioql PyPI...

EUVD-2022-2051

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: undock, tigera-operator, kapp, render-template, thanos-operator, headlamp, cluster-api, apm-server, mongo-tools, gobump, dive, kubecolor, k3s, docker-credential-gcr, ipfs-cluster, controller-gen, karpenter, rancher-agent, flux, aws-eks-pod-identity-agent, nri-f5,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: node-problem-detector-fips, nats, terraform-provider-sendgrid-fips, gcp-compute-persistent-disk-csi-driver-fips, cluster-api, sftpgo-plugin-geoipfilter, prometheus-nats-exporter, confluent-common-docker, ctop, newrelic-fluent-bit-output, local-path-provisioner,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: node-problem-detector-fips, nats, terraform-provider-sendgrid-fips, gcp-compute-persistent-disk-csi-driver-fips, cluster-api, sftpgo-plugin-geoipfilter, prometheus-nats-exporter, confluent-common-docker, ctop, newrelic-fluent-bit-output, local-path-provisioner,...

SUSE CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...