CLEANSTART-2026-PA85871 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

CLEANSTART-2026-CB20757 Cancelling a query (e

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-UY85485 Within HostnameError

Multiple security vulnerabilities affect the vault-k8s package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2025-CN65903 Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-EU07511 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual CVE details...

CVE-2026-23634: Least Privilege Violation

Pepr is a type safe K8s middleware. Prior to 1.0.5 , Pepr defaults to a cluster-admin RBAC configuration and does not explicitly force or enforce least-privilege guidance for module authors. The default behavior exists to make the “getting started” experience smooth: new users can experiment with...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: multus-cni, podman, containerd, azure-ipam, calico, nerdctl, istio-fips, kuma, nerdctl-fips, docker, multus-cni-fips, datadog-agent-fips, buildkitd-fips, rke2-runtime, calico-fips, rootlesskit-fips, amazon-k8s-cni-fips, buildah, datadog-agent, buildkitd, flannel,...

EUVD-2019-13411

Malware in sbrugna...

EUVD-2018-2989

Malware in sbrugna...

EUVD-2023-52298

Malicious code in bioql PyPI...

EUVD-2025-7228

Malicious code in bioql PyPI...

EUVD-2024-48013

Malicious code in bioql PyPI...

EUVD-2025-0167

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: grafana-alloy, terraform, ipfs-cluster, kpt, nri-nginx, apm-server, caddy, kyverno-notation-aws, guac, harbor-registry, rabbitmq-messaging-topology-operator, kind, envconsul, witness, dgraph, docker-cli-buildx, pluto, src, falcoctl, bom, wire-go,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, local-path-provisioner, grafana-operator, newrelic-fluent-bit-output, nats, cloud-provider-aws, bank-vaults, secrets-store-csi-driver-provider-aws, gostatsd, kubeflow-katib, terraform-provider-time, k8sgpt-operator, pvc-autoresizer, linkerd2-proxy-init, ctop...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, nvidia-nsight-compute-12.9, kube-vip-cloud-provider, cloud-provider-aws-fips, linkerd2-proxy-init, blob-csi-fips, nvidia-nsight-compute-12.8, karma-fips, secrets-store-csi-driver-provider-aws-fips, mattmoor-chainit, pvc-autoresizer, karpenter-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, nvidia-nsight-compute-12.9, kube-vip-cloud-provider, cloud-provider-aws-fips, linkerd2-proxy-init, blob-csi-fips, nvidia-nsight-compute-12.8, karma-fips, secrets-store-csi-driver-provider-aws-fips, mattmoor-chainit, pvc-autoresizer, karpenter-fips,...

CVE-2025-9276 Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability

Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The specific flaw...

Cockroach Labs cockroach-k8s-request-cert 安全漏洞

Cockroach Labs cockroach-k8s-request-cert is a container image from Cockroach Labs, Inc. A security vulnerability exists in Cockroach Labs cockroach-k8s-request-cert, which stems from an empty root password setting and could lead to authentication bypass...

CVE-2025-9276: Empty Password in Configuration File

Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The specific flaw...