io.spinnaker.clouddriver:clouddriver-api-tck (5.94.0), io.spinnaker.clouddriver:clouddriver-appengine (5.94.0) +5 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.94.0)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.94.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.94.0 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.91.6), io.spinnaker.clouddriver:clouddriver-appengine (5.91.6) +5 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.91.6)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.91.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.91.6 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.78.11), io.spinnaker.clouddriver:clouddriver-appengine (5.78.11) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.78.11)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.78.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.78.11 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.91.4), io.spinnaker.clouddriver:clouddriver-appengine (5.91.4) +5 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.91.4)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.91.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.91.4 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.78.5), io.spinnaker.clouddriver:clouddriver-appengine (5.78.5) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.78.5)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.78.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.78.5 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.76.4), io.spinnaker.clouddriver:clouddriver-appengine (5.76.4) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.76.4)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.76.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.76.4 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.85.5), io.spinnaker.clouddriver:clouddriver-appengine (5.85.5) +5 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.85.5)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.85.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.85.5 -...

Important: ecs-init

Issue Overview: A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is...

Amazon Linux 2 : ecs-service-connect-agent, --advisory ALAS2ECS-2025-093 (ALASECS-2025-093)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.34.4.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-093 advisory. There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with...

Medium: docker

Issue Overview: SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. CVE-2025-47914 SSH servers parsing GSSAPI authentication requests do not validate the number...

Medium: ecs-init

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

Amazon Linux 2 : ecs-init, --advisory ALAS2ECS-2025-092 (ALASECS-2025-092)

The version of ecs-init installed on the remote host is prior to 1.82.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-092 advisory. A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload...

EulerOS Virtualization 2.13.1 : unbound (EulerOS-SA-2025-2567)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS...

EulerOS Virtualization 2.13.0 : unbound (EulerOS-SA-2025-2602)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS...

Amazon Linux 2 : containerd, --advisory ALAS2ECS-2025-084 (ALASECS-2025-084)

The version of containerd installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-084 advisory. containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2025-2431)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet...

Low: runc

Issue Overview: No CVE associated with this advisory Affected Packages: runc Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...

Low: docker

Issue Overview: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails...

EulerOS 2.0 SP13 : unbound (EulerOS-SA-2025-2313)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2ECS-2025-075 (ALASECS-2025-075)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-075 advisory. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking...