Medium: amazon-ecr-credential-helper

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: amazon-ecr-credential-helper Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn...

Medium: amazon-ecr-credential-helper

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: amazon-ecr-credential-helper Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this pa...

Medium: amazon-ecr-credential-helper

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: amazon-ecr-credential-helper Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, container-object-storage-interface, sftpgo-plugin-geoipfilter, gitsign, newrelic-nri-statsd, kube-vip-cloud-provider, custom-pod-autoscaler-operator, vexctl, rancher-machine, nats, lvm-driver, newrelic-fluent-bit-output, dagdotdev,...

MAL-2025-9967 Malicious code in @zalastax/nolb-_ecr (npm)

The package @zalastax/nolb-ecr was found to contain malicious code...

Malicious code in @zalastax/nolb-_ecr (npm)

The package @zalastax/nolb-ecr was found to contain malicious code...

Important: amazon-ecr-credential-helper

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-ecr-credential-helper

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-ecr-credential-helper

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2025-1039)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1039 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASDOCKER-2025-069)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2025-069 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size lin...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2025-065)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2025-065 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid...

Important: amazon-ecr-credential-helper

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

CVE-2021-25776

In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, nri-rabbitmq, gatus, pulumi-kubernetes-operator, doppler-kubernetes-operator, tempo, flannel-cni-plugin, gitness, dagdotdev, k3s, neuvector-dbgen, flux, neuvector-scanner, kubescape, malcontent, git-credential-oauth, task, sbom-scorecard, cri-tools,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, nri-rabbitmq, gatus, pulumi-kubernetes-operator, doppler-kubernetes-operator, tempo, flannel-cni-plugin, gitness, dagdotdev, k3s, neuvector-dbgen, flux, neuvector-scanner, kubescape, malcontent, git-credential-oauth, task, sbom-scorecard, cri-tools,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: git-sync-fips, kubernetes-csi-external-resizer-fips, crossplane-provider-sql-fips, hivemind, crossplane, task, aws-flb-firehose-fips, extism, cert-manager-fips, docker-cli-buildx, prometheus-elasticsearch-exporter, envoy-gateway-fips, volume-modifier-for-k8s, ini-fil...

Medium: amazon-ecr-credential-helper

Issue Overview: The various Is methods IsPrivate, IsLoopback, etc did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. CVE-2024-24790 Affected Packages: amazon-ecr-credential-helper Issue Correction: Run dn...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2024-043)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.9.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2024-043 advisory. The various Is methods IsPrivate, IsLoopback, etc did not work as expected for IPv4-mapped IPv6 addresses,...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2024-047)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.9.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2024-047 advisory. The various Is methods IsPrivate, IsLoopback, etc did not work as expected for IPv4-mapped IPv6...