PT-2026-7832

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, kuma, rke2-runtime, k3s, nerdctl, istio-fips, azure-ipam, flannel-fips, calico, buildah, rootlesskit-fips, amazon-k8s-cni-fips, buildkitd, flannel, podman, calico-fips, multus-cni, datadog-agent, multus-cni-fips, rootlesskit, buildkitd-fips, istio...

EUVD-2019-13411

Malware in sbrugna...

EUVD-2018-2989

Malware in sbrugna...

EUVD-2025-7228

Malicious code in bioql PyPI...

EUVD-2024-48013

Malicious code in bioql PyPI...

EUVD-2023-52298

Malicious code in bioql PyPI...

EUVD-2025-0167

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: vault, rke2-runtime, bom, helm-set-status, traefik, chart-testing, conftest, aws-application-networking-k8s, rancher-agent, spark-operator, headlamp, gatekeeper, google-osconfig-agent, dapr, rancher-system-upgrade-controller, spire-controller-manager, nuclei, consul,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: vexctl, gitsign, php-fpmexporter, custom-pod-autoscaler-operator, bank-vaults, sftpgo-plugin-pubsub, terraform-provider-time, checksec, hivemind, k8sgpt-operator, dagdotdev, grafana-operator, linkerd2-proxy-init, local-path-provisioner, newrelic-nri-statsd, octo-sts,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, etcd-fips, lvm-driver, yace-fips, hivemind, octo-sts, gitsign, nvidia-nsight-compute-12.9, node-problem-detector-fips, nvidia-nsight-compute-13.0, configmap-reload-fips, docker-credential-ecr-login, knative-eventing, git-lfs, prometheus-adapter...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, etcd-fips, lvm-driver, yace-fips, hivemind, octo-sts, gitsign, nvidia-nsight-compute-12.9, node-problem-detector-fips, nvidia-nsight-compute-13.0, configmap-reload-fips, docker-credential-ecr-login, knative-eventing, git-lfs, prometheus-adapter...

CVE-2025-9276 Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability

Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The specific flaw...

CVE-2025-9276

Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The specific flaw...

Cockroach Labs cockroach-k8s-request-cert 安全漏洞

Cockroach Labs cockroach-k8s-request-cert is a container image from Cockroach Labs, Inc. A security vulnerability exists in Cockroach Labs cockroach-k8s-request-cert, which stems from an empty root password setting and could lead to authentication bypass...

CVE-2025-9276: Empty Password in Configuration File

Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The specific flaw...

PT-2025-34183

Name of the Vulnerable Software and Affected Versions: Cockroach Labs cockroach-k8s-request-cert affected versions not specified Description: The cockroach-k8s-request-cert component is susceptible to an authentication bypass due to an empty root password. This allows unauthorized access...

MAL-2025-17054 Malicious code in cisco-k8s (npm)

The package cisco-k8s was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: vault, rke2-runtime, k8ssandra-client-fips, packer, kepler, lazygit, yunikorn-web, dapr, cfssl-fips, pgpool2exporter, terraform-provider-kubernetes, nvidia-nsight-compute-13.0, consul, elvish, k8s-device-plugin, nri-cassandra, rancher-helm, yq, step-kms-plugin-fips,...

CVE-2025-23260

NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole. A successful exploit of this vulnerability may lead to information disclosure...