GHSA-V4M2-X4RP-HV22 vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib...

GHSA-9F7G-GQWH-JPF5 vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib...

GHSA-F8F7-69V5-W4VX vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, kind...

GHSA-FP86-2355-V99R vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib...

GHSA-7QHM-5MXQ-X7VP vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib...

GHSA-VVJP-Q62M-2VPH vulnerabilities

Vulnerabilities for packages: go...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: sbom-scorecard, falco-exporter, kubernetes, nri-mysql, actions-runner-controller, step, k8ssandra-operator, argo-events, nri-elasticsearch, mage, grafana-agent-operator, grafana-operator, cert-exporter, terraform-provider-google, chezmoi, docker-credential-ecr-login,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: sbom-scorecard, bazelisk, falco-exporter, kubernetes, actions-runner-controller, k8ssandra-operator, argo-events, mage, grafana-operator, docker-credential-ecr-login, vt-cli, distribution, render-template, pdfcpu, nuclei, metrics-server, cni-plugins, trust-manager,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: sbom-scorecard, bazelisk, k3s, kubernetes-csi-livenessprobe, flux-image-reflector-controller, aws-flb-firehose, flux-image-automation-controller, go-bindata, nri-mysql, kubernetes-dashboard-metrics-scraper, actions-runner-controller, tailscale, terraform,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, bazelisk, k3s, kubernetes-csi-livenessprobe, flux-image-reflector-controller, aws-flb-firehose, flux-image-automation-controller, go-bindata, nri-mysql, kubernetes-dashboard-metrics-scraper, actions-runner-controller, tailscale, terraform,...

GHSA-7QHM-5MXQ-X7VP vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go...

GHSA-FP86-2355-V99R vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go...

GHSA-9F7G-GQWH-JPF5 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go...

GHSA-3Q6H-Q44P-XW88 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go...

GHSA-F8F7-69V5-W4VX vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, kind...

GHSA-XC82-5M89-G4JV vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, kind...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: beats-fips, eck-operator-fips, aws-network-policy-agent, wavefront-collector-for-kubernetes, openfga, aws-load-balancer-controller, crane, kubewatch, actions-runner-controller-fips, http-echo, kafkaexporter, restic, fq, boring-registry, prometheus-alertmanager-fips,...

CVE-2025-27144

A flaw was found in GO-JOSE. In affected versions, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code uses strings.Splittoken, "." to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large numb...

DEBIAN-CVE-2025-27144

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

AZL-57126 CVE-2025-27144 affecting package cert-manager for versions less than 1.12.15-2

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...