10 matches found
Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to cert-manager ( CVE-2026-25518 )
Summary Potential vulnerabilities in cert-manager package CVE-2026-25518 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-25518 DESCRIPTION: cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and...
Malicious code in acme-dns-01-dyndns (npm)
The package acme-dns-01-dyndns was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in acme-dns-01-lightsail (npm)
The package acme-dns-01-lightsail was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in acme-dns-01-freedns (npm)
The package acme-dns-01-freedns was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-25518
cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...
CVE-2026-25518: Improper Validation of Array Index
cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...
PT-2026-6308
Name of the Vulnerable Software and Affected Versions cert-manager versions 1.18.0 through 1.18.4 cert-manager versions 1.19.0 through 1.19.2 Description cert-manager simplifies the process of obtaining, renewing, and using certificates in Kubernetes clusters. The cert-manager-controller performs...
MAL-2025-14008 Malicious code in acme-dns-01-lightsail (npm)
The package acme-dns-01-lightsail was found to contain malicious code...
