430 matches found
BIT-FLUX-2022-24817 Improper kubeconfig validation allows arbitrary code execution
Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also...
CVE-2025-58181 vulnerabilities
Vulnerabilities for packages: terraform-provider-azurerm, rke2-cloud-provider, witness, k3s, swagger, crossplane-provider-azure-managedidentity, falco-no-driver, traefik, kyverno, crossplane-provider-aws, gitsign, juicefs-csi-driver, crossplane-provider-aws-kms, sftpgo,...
CVE-2025-47914 vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider, witness, k3s, crossplane-provider-azure-managedidentity, falco-no-driver, traefik, kyverno, crossplane-provider-aws, gitsign, juicefs-csi-driver, crossplane-provider-aws-kms, sftpgo, crossplane-provider-aws-elasticache, minio, azure-ipam, wolfict...
GHSA-F6X5-JH6R-WRFV vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider, witness, k3s, crossplane-provider-azure-managedidentity, falco-no-driver, traefik, kyverno, crossplane-provider-aws, gitsign, juicefs-csi-driver, crossplane-provider-aws-kms, sftpgo, crossplane-provider-aws-elasticache, minio, azure-ipam, wolfict...
GHSA-J5W8-Q4QC-RX2X vulnerabilities
Vulnerabilities for packages: terraform-provider-azurerm, rke2-cloud-provider, witness, k3s, swagger, crossplane-provider-azure-managedidentity, falco-no-driver, traefik, kyverno, crossplane-provider-aws, gitsign, juicefs-csi-driver, crossplane-provider-aws-kms, sftpgo,...
EUVD-2025-36690
FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery CSRF vulnerability exists in the FluxCP-based website template used by multiple rAthena/Ragnarok servers. State-changing POST endpoints accept browser-initiated requests that are authoriz...
EUVD-2008-2681
Malware in sbrugna...
EUVD-2022-6984
Malicious code in bioql PyPI...
EUVD-2022-4298
Malicious code in bioql PyPI...
EUVD-2022-38802
Malicious code in bioql PyPI...
EUVD-2022-7087
Malicious code in bioql PyPI...
EUVD-2022-3043
Malicious code in bioql PyPI...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, docker-credential-gcr, witness, k3s, swagger, nri-f5, controller-gen, kubernetes-dashboard, cloud-sql-proxy, k3d, amazon-cloudwatch-agent-operator, cni-plugins, docker-cli-buildx, helm-set-status, grafana-rollout-operator, ip-masq-agent, dgraph...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: step-kms-plugin, dgraph, harbor-cli, opa, tekton-chains, mockgen, fulcio, cloud-provider-gcp-cloud-controller-manager, nri-apache, yunikorn-k8shim, cluster-api-helm-controller, google-osconfig-agent, tekton-pipelines, spark-operator, wgcf, kyverno, nri-rabbitmq,...
CVE-2024-51491 vulnerabilities
Vulnerabilities for packages: flux-fips, kyverno, kyverno-fips...
GHSA-QJH3-4J3H-VMWP vulnerabilities
Vulnerabilities for packages: flux-fips, kyverno, kyverno-fips...
Malicious code in flux-example-todo (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41565 Malicious code in flux-example-todo (npm)
--- -= Per source details. Do not edit below this line.=-...