CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, azure-workload-identity-webhook, sonobuoy, timescaledb-parallel-copy, infinispan-operator, secrets-store-csi-driver-provider-gcp, docker-credential-ecr-login, hey, controller-gen, kind, ko, rancher-helm, lazydocker, crossplane,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: metacontroller, cluster-proportional-autoscaler, mockery, fq, maru, logstash-exporter, kapp, sigstore-scaffolding, cloud-provider-aws, k8ssandra-client-fips, sriov-network-device-plugin-fips, terraform-provider-kubernetes-fips, gitlab-rails-ce, grpcurl, vault,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: metacontroller, cluster-proportional-autoscaler, mockery, fq, maru, logstash-exporter, kapp, sigstore-scaffolding, cloud-provider-aws, k8ssandra-client-fips, sriov-network-device-plugin-fips, terraform-provider-kubernetes-fips, gitlab-rails-ce, grpcurl, vault,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: metacontroller, cluster-proportional-autoscaler, mockery, fq, maru, logstash-exporter, kapp, sigstore-scaffolding, cloud-provider-aws, k8ssandra-client-fips, sriov-network-device-plugin-fips, terraform-provider-kubernetes-fips, gitlab-rails-ce, grpcurl, vault,...

EUVD-2022-5630

Malicious code in bioql PyPI...

docker-machine-driver-kvm2-1.36.0-2.1 on GA media (moderate)

docker-machine-driver-kvm2-1.36.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15464-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2025:15463-1 docker-machine-driver-kvm2-1.36.0-2.1 on GA media

These are all security issues fixed in the docker-machine-driver-kvm2-1.36.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-40453

Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, which might potentially trick an administrator into performing an unsafe action via escape sequence injection, or might have a data size that causes a denial of service to a bastio...

OPENSUSE-SU-2024:11051-1 docker-machine-driver-kvm2-1.23.0-1.2 on GA media

These are all security issues fixed in the docker-machine-driver-kvm2-1.23.0-1.2 package on the GA media of openSUSE Tumbleweed...

CVE-2023-40453

Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, which might potentially trick an administrator into performing an unsafe action via escape sequence injection, or might have a data size that causes a denial of service to a bastio...

CVE-2023-40453

Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, which might potentially trick an administrator into performing an unsafe action via escape sequence injection, or might have a data size that causes a denial of service to a bastio...