549 matches found
BIT-FLUX-2022-24817 Improper kubeconfig validation allows arbitrary code execution
Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also...
CVE-2025-47914 vulnerabilities
Vulnerabilities for packages: crossplane-provider-keycloak, distribution, external-dns, fq, kubernetes-csi-external-health-monitor, kine, juicefs-csi-driver, istio, sftpgo, op-geth, kserve-modelmesh-serving, crossplane-provider-sql, opencost, portieris, rook, src-fingerprint, argo-rollouts,...
CVE-2025-58181 vulnerabilities
Vulnerabilities for packages: crossplane-provider-keycloak, distribution, external-dns, fq, kubernetes-csi-external-health-monitor, kine, step-ca, juicefs-csi-driver, chisel, istio, sftpgo, opencost, kserve-modelmesh-serving, crossplane-provider-sql, frp, portieris, rook, src-fingerprint,...
GHSA-F6X5-JH6R-WRFV vulnerabilities
Vulnerabilities for packages: crossplane-provider-keycloak, distribution, external-dns, fq, kubernetes-csi-external-health-monitor, kine, juicefs-csi-driver, istio, sftpgo, op-geth, kserve-modelmesh-serving, crossplane-provider-sql, opencost, portieris, rook, src-fingerprint, argo-rollouts,...
GHSA-J5W8-Q4QC-RX2X vulnerabilities
Vulnerabilities for packages: crossplane-provider-keycloak, distribution, external-dns, fq, kubernetes-csi-external-health-monitor, kine, step-ca, juicefs-csi-driver, chisel, istio, sftpgo, opencost, kserve-modelmesh-serving, crossplane-provider-sql, frp, portieris, rook, src-fingerprint,...
EUVD-2025-36690
FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery CSRF vulnerability exists in the FluxCP-based website template used by multiple rAthena/Ragnarok servers. State-changing POST endpoints accept browser-initiated requests that are authoriz...
EUVD-2008-2681
Malware in sbrugna...
EUVD-2022-3043
Malicious code in bioql PyPI...
EUVD-2022-7087
Malicious code in bioql PyPI...
EUVD-2022-6984
Malicious code in bioql PyPI...
EUVD-2022-38802
Malicious code in bioql PyPI...
EUVD-2022-4298
Malicious code in bioql PyPI...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: wire-go, cerbos, nri-haproxy, rclone, kubernetes-csi-external-health-monitor, kapp, portieris, kapp-controller, undock, zot, falcoctl, polaris, hubble, kubernetes-dashboard-api, nginx-prometheus-exporter, wal-g, k8sgateway, lazydocker, nuclei, helm-operator, nodetain...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: kube-bench, cloud-sql-proxy, grafana-pyroscope, trivy, fulcio, kind, nri-rabbitmq, apm-server, pluto, rancher, harbor-registry, steampipe, glow, argo-events, regclient, kuma, ko, kubeflow-katib, chartmuseum, falcoctl, kyverno-notation-aws, kubernetes-dashboard-web,...
CVE-2024-51491 vulnerabilities
Vulnerabilities for packages: flux-fips...
GHSA-QJH3-4J3H-VMWP vulnerabilities
Vulnerabilities for packages: flux-fips...
Malicious code in flux-example-todo (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41565 Malicious code in flux-example-todo (npm)
--- -= Per source details. Do not edit below this line.=-...