1943 matches found
EUVD-2022-1529
Malicious code in bioql PyPI...
EUVD-2023-12564
Malicious code in bioql PyPI...
EUVD-2022-7524
Malicious code in bioql PyPI...
EUVD-2022-7540
Malicious code in bioql PyPI...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to helm ( CVE-2025-32386, CVE-2025-32387 )
Summary Helm is used by IBM Cloud Pak for Data to build binaries in cpd-cli. Vulnerability Details CVEID:CVE-2025-32386 DESCRIPTION: Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g.,...
Unauthorized Disclosure Of Sensitive Data
github.com/rancher/fleet is vulnerable to Unauthorized Disclosure of Sensitive Data. The vulnerability is due to improper access control on BundleDeployment resources with GET or LIST permissions, which allows an attacker to retrieve Helm values containing credentials or other secrets...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.58 security and extras update
Red Hat OpenShift Container Platform release 4.15.58 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a security impact of...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.57 security and extras update
Red Hat OpenShift Container Platform release 4.14.57 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...
CVE-2025-47910 vulnerabilities
Vulnerabilities for packages: prometheus-operator, nats-server-config-reloader, hubble, spark-operator, fulcio, cni-plugins, polaris, steampipe, envconsul, clickhouse-operator, fzf, wal-g, helm-push, cis-operator, kubernetes-dashboard-web, kapp, kubernetes-csi-driver-hostpath, dive, mockgen,...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: prometheus-operator, nats-server-config-reloader, hubble, spark-operator, fulcio, cni-plugins, polaris, steampipe, envconsul, clickhouse-operator, fzf, wal-g, helm-push, cis-operator, kubernetes-dashboard-web, kapp, kubernetes-csi-driver-hostpath, dive, mockgen,...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: vault, rke2-runtime, bom, helm-set-status, traefik, chart-testing, conftest, aws-application-networking-k8s, rancher-agent, spark-operator, headlamp, gatekeeper, google-osconfig-agent, dapr, rancher-system-upgrade-controller, spire-controller-manager, nuclei, consul,...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.48 security and extras update
Red Hat OpenShift Container Platform release 4.16.48 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a security impact of...
The vulnerability of the package manager for Kubernetes Helm, related to the use of an uninitialized resource, allows a attacker to cause a service failure.
The vulnerability of the package manager for Kubernetes Helm is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the package manager for Kubernetes Helm, related to the distribution of resources without any restrictions or controls, allows a attacker to cause a service failure.
The vulnerability of the package manager for Kubernetes Helm is related to the distribution of resources without any restrictions or controls. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.39 security and extras update
Red Hat OpenShift Container Platform release 4.17.39 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...
Linux Distros Unpatched Vulnerability : CVE-2019-1010275
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed...
GO-2025-3927 Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet...
The vulnerability of the package manager for Kubernetes Helm, related to improper code generation management, allows a attacker to execute arbitrary code.
The vulnerability of the package manager for Kubernetes Helm is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
ROS-20250908-12
A vulnerability in the code generation library for transferring data between different Mapstruct entities is related to a decoding helper call that outputs the original value of a confidential field. Exploitation of the of the vulnerability could allow an attacker acting remotely to gain access t...
