GHSA-38PP-6GCP-RQVM vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2025-64715 vulnerabilities

Vulnerabilities for packages: hubble-ui...

EUVD-2021-27052

Malware in sbrugna...

EUVD-2021-27050

Malware in sbrugna...

EUVD-2021-27049

Malware in sbrugna...

EUVD-2021-27051

Malware in sbrugna...

EUVD-2021-27054

Malware in sbrugna...

EUVD-2021-27053

Malware in sbrugna...

EUVD-2025-0166

Malicious code in bioql PyPI...

EUVD-2024-1138

Malicious code in bioql PyPI...

EUVD-2025-15956

Malicious code in bioql PyPI...

SUSE CVE-2025-48056

Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to version 1.17.2, a network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output...

Control Character Injection

github.com/cilium/hubble is vulnerable to control character injection. The vulnerability is due to improper sanitization of control characters in the terminal output when monitoring Kafka traffic using Layer 7 Protocol Visibility and allows an attacker to manipulate output, conceal log entries, o...

GO-2025-3700 Character injection in Hubble CLI in github.com/cilium/hubble

Character injection in Hubble CLI in github.com/cilium/hubble...

CVE-2024-48798

An issue in Hubble Connected com.hubbleconnected.vervelife 2.00.81 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2021-3791

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password...

CVE-2021-3787

A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services...

CVE-2025-48056

Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to version 1.17.2, a network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output...

CVE-2021-3790

A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device...

GHSA-274Q-79Q9-52J7 Character injection in Hubble CLI

Impact A network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output. This could be leveraged to conceal log entries, rewrite output, or even make the terminal temporarily unusable. Exploitatio...