EUVD-2022-6183

Malicious code in bioql PyPI...

EUVD-2022-2051

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: argo-events, glow, neuvector, kubernetes-csi-driver-nfs, wgcf, kapp, src, traefik, apm-server, kube-logging-operator, kubecolor, delve, gobump, ipfs-cluster, docker-cli-buildx, containerd, eck-operator, cerbos, wait-for-port, azuredisk-csi, nri-redis,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: bank-vaults, prometheus-process-exporter, vault-k8s, kubernetes-dashboard-fips, k8sgpt-operator, nvidia-nsight-compute-13.2, nemo, terraform-provider-tls-fips, knative-eventing, configmap-reload-fips, custom-pod-autoscaler-operator, prometheus-bind-exporter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: bank-vaults, prometheus-process-exporter, vault-k8s, kubernetes-dashboard-fips, k8sgpt-operator, nvidia-nsight-compute-13.2, nemo, terraform-provider-tls-fips, knative-eventing, configmap-reload-fips, custom-pod-autoscaler-operator, prometheus-bind-exporter,...

SUSE CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: temporal-server, openbao, argo-events, azcopy, crossplane-provider-aws, kyverno-notation-aws, postgres-operator, kserve-modelmesh-serving, kubernetes-dashboard-metrics-scraper, wal-g, sops, dex, yunikorn-k8shim, sbomqs, opencost, rabbitmq-cluster-operator,...

CVE-2022-31077

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message response from KubeEdge can crash the CSI Driver controller server by triggering a nil-pointer dereference panic. As a...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, bank-vaults, kubernetes-csi-driver-nfs, sriov-network-device-plugin-fips, crossplane-provider-sql-fips, filebrowser, opentelemetry-collector-contrib-fips, k8sgpt-operator, minio-operator-fips, cluster-autoscaler-fips, eck-operator, nemo,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: confluent-common-docker, crossplane-provider-aws, postgres-operator, rabbitmq-default-user-credential-updater, kubernetes-csi-driver-hostpath, kubernetes-dashboard-metrics-scraper, protoc-gen-go, sops, dex, sbomqs, nri-consul, rabbitmq-cluster-operator,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: temporal-server, runc, speedtest-go, q, k8sgpt-operator, vault-k8s, grpcurl, k3d, prometheus-pushgateway, flannel-cni-plugin, trillian, esbuild, kubernetes-dashboard-metrics-scraper, nri-nginx, petname, vite, nri-prometheus, cue, kubebuilder, dex, eksctl, sbomqs,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: temporal-server, runc, speedtest-go, q, k8sgpt-operator, vault-k8s, grpcurl, k3d, prometheus-pushgateway, flannel-cni-plugin, trillian, esbuild, kubernetes-dashboard-metrics-scraper, nri-nginx, petname, vite, nri-prometheus, cue, kubebuilder, dex, eksctl, sbomqs,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: ini-file, sftpgo-plugin-eventstore, temporal-server, argo-events, confluent-common-docker, crossplane-provider-aws, postgres-operator, kserve-modelmesh-serving, kubernetes-csi-driver-hostpath, kubernetes-dashboard-metrics-scraper, dex, sbom-convert, sbomqs,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, argocd-image-updater, argo-rollouts, vcluster, kubernetes, kubernetes-csi-driver-nfs, kubernetes-dns-node-cache, rancher-fleet, aws-efs-csi-driver, kapp, nodetaint, spark-operator, ip-masq-agent, local-static-provisioner,...