EUVD-2022-5336

Malicious code in bioql PyPI...

EUVD-2022-7256

Malicious code in bioql PyPI...

EUVD-2022-6197

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.2

Red Hat OpenShift Service Mesh 3.1.2 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.1....

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: helm-docs, cerbos, kubescape, zarf, headlamp, pluto, cluster-api-helm-controller, eksctl, zot, flux-helm-controller, chartmuseum, kargo, cert-manager-cmctl, flux-source-controller, envoy-gateway, cilium-cli, rancher-fleet, trivy-operator, nova, k9s, kots, linkerd2,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: helm-docs, cerbos, kubescape, zarf, headlamp, pluto, cluster-api-helm-controller, eksctl, zot, flux-helm-controller, chartmuseum, kargo, cert-manager-cmctl, flux-source-controller, envoy-gateway, cilium-cli, rancher-fleet, trivy-operator, nova, k9s, kots, linkerd2,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: helm-docs, cerbos, kubescape, zarf, headlamp, pluto, cluster-api-helm-controller, eksctl, zot, flux-helm-controller, chartmuseum, kargo, cert-manager-cmctl, flux-source-controller, envoy-gateway, cilium-cli, rancher-fleet, trivy-operator, nova, k9s, kots, linkerd2,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: helm-docs, cerbos, kubescape, zarf, headlamp, pluto, cluster-api-helm-controller, eksctl, zot, flux-helm-controller, chartmuseum, kargo, cert-manager-cmctl, flux-source-controller, envoy-gateway, cilium-cli, rancher-fleet, trivy-operator, nova, k9s, kots, linkerd2,...

Malicious code in istio-feeder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7455087a858d4ab6e5e5e42c14c3fb5b55222d653b9b971d12b0fe56a4cc7a5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5924 Malicious code in istio-feeder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7455087a858d4ab6e5e5e42c14c3fb5b55222d653b9b971d12b0fe56a4cc7a5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: zot, flux, kargo, flux-source-controller, k8sgpt, cert-manager-cmctl, k8ssandra-client-fips, helm-operator-fips, cerbos, flux-fips, eksctl, cert-manager-cmctl-fips, cerbos-fips, kots, harbor-fips, pluto, harbor, istio, tw, kuma, rancher-fleet-fips, envoy-gateway,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: zot, flux, kargo, flux-source-controller, k8sgpt, cert-manager-cmctl, k8ssandra-client-fips, helm-operator-fips, cerbos, flux-fips, eksctl, cert-manager-cmctl-fips, cerbos-fips, kots, harbor-fips, pluto, harbor, istio, tw, kuma, rancher-fleet-fips, envoy-gateway,...

CVE-2020-8843

An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at ingress that can be used to affect policy decisions when Mixer policy selectively applies to a...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubescape, kind, incert, git-credential-oauth, prometheus, wazero, pgtimetable, age, sealed-secrets, temporal-server, cert-manager-cmctl, fluent-operator, kubernetes-csi-driver-hostpath, esbuild, golangci-lint, glab,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubescape, kind, incert, git-credential-oauth, prometheus, wazero, pgtimetable, age, sealed-secrets, temporal-server, cert-manager-cmctl, fluent-operator, kubernetes-csi-driver-hostpath, esbuild, golangci-lint, glab,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: kaf, rabbitmq-messaging-topology-operator, kubernetes-ingress-defaultbackend, certificate-transparency, kubescape, kind, sigstore-scaffolding, ferretdb, weaviate, wazero, pulumi-language-dotnet, age, terraform-provider-azurerm, fluent-operator,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: lazygit, flux, aws-efs-csi-driver-fips, pulumi-language-yaml, sbomqs, go-md2man, bom, gomplate, bazelisk, kube-state-metrics-fips, nri-nginx, docker-credential-acr-env, request-1279, prometheus-postgres-exporter-fips, temporal-ui-server-fips, influx, aws-flb-kinesis,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: lazygit, flux, aws-efs-csi-driver-fips, pulumi-language-yaml, sbomqs, go-md2man, bom, gomplate, bazelisk, kube-state-metrics-fips, nri-nginx, docker-credential-acr-env, request-1279, prometheus-postgres-exporter-fips, temporal-ui-server-fips, influx, aws-flb-kinesis,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: go-md2man, aws-flb-kinesis-fips, etcd-fips, aws-flb-cloudwatch-fips, metrics-server, k9s, falcoctl, volume-modifier-for-k8s, vault-k8s, cosign-fips, configmap-reload, ko, wave-fips, prometheus-redis-exporter-fips, local-path-provisioner, terraform-docs, fulcio-fips,...

SUSE CVE-2024-8901

The AWS ALB Route Directive Adapter For Istio repo https://github.com/awslabs/aws-alb-route-directive-adapter-for-istio/tree/master provides an OIDC authentication mechanism that was integrated into the open source Kubeflow project. The adapter uses JWT for authentication, but lacks proper signer...