Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-1370)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1370 advisory. net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processe...

Important: amazon-ecr-credential-helper

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

Important: amazon-ecr-credential-helper

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2ECS-2025-087 (ALASECS-2025-087)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.11.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-087 advisory. crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2DOCKER-2025-087 (ALASDOCKER-2025-087)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.11.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-087 advisory. crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomai...

Important: amazon-ecr-credential-helper

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

MAL-2025-191719 Malicious code in discordhelper-ecr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in discordhelper-ecr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2DOCKER-2025-079 (ALASDOCKER-2025-079)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-079 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted value...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2ECS-2025-078 (ALASECS-2025-078)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-078 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values...

Important: amazon-ecr-credential-helper

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

Important: amazon-ecr-credential-helper

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, fq, crossplane, local-path-provisioner, stern, conftest, aws-node-termination-handler, ytt, mkcert, octo-sts, chisel, dask-gateway, wait-for-port, sonobuoy, kube-rbac-proxy, contour, prometheus-operator, kubernetes-csi-external-attacher,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: hello-world-golang, kafkaexporter, fq, rekor, timoni, ipfs-cluster, crossplane, local-path-provisioner, go-md2man, dockerize, stern, kaf, conftest, govulncheck, kubernetes-csi-driver-hostpath, nodetaint, aws-node-termination-handler, prometheus-adapter,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: hello-world-golang, kafkaexporter, fq, rekor, timoni, ipfs-cluster, crossplane, local-path-provisioner, go-md2man, dockerize, stern, kaf, conftest, govulncheck, kubernetes-csi-driver-hostpath, nodetaint, aws-node-termination-handler, prometheus-adapter,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: hello-world-golang, kafkaexporter, fq, rekor, timoni, ipfs-cluster, crossplane, local-path-provisioner, go-md2man, dockerize, stern, kaf, conftest, govulncheck, kubernetes-csi-driver-hostpath, nodetaint, aws-node-termination-handler, prometheus-adapter,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: hello-world-golang, kafkaexporter, fq, rekor, timoni, ipfs-cluster, crossplane, local-path-provisioner, go-md2man, dockerize, stern, kaf, conftest, govulncheck, kubernetes-csi-driver-hostpath, aws-node-termination-handler, prometheus-adapter, infinispan-operator,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: hello-world-golang, kafkaexporter, fq, rekor, timoni, ipfs-cluster, crossplane, local-path-provisioner, go-md2man, dockerize, stern, kaf, conftest, govulncheck, kubernetes-csi-driver-hostpath, nodetaint, aws-node-termination-handler, prometheus-adapter,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: hello-world-golang, kafkaexporter, fq, rekor, timoni, ipfs-cluster, crossplane, local-path-provisioner, go-md2man, dockerize, stern, kaf, conftest, govulncheck, kubernetes-csi-driver-hostpath, nodetaint, aws-node-termination-handler, prometheus-adapter,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: hello-world-golang, kafkaexporter, fq, rekor, timoni, ipfs-cluster, crossplane, local-path-provisioner, go-md2man, dockerize, stern, kaf, conftest, govulncheck, kubernetes-csi-driver-hostpath, nodetaint, aws-node-termination-handler, prometheus-adapter,...