CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli, cassandra-reaper, zookeeper, akhq, dependency-track, apache-nifi, management-api-for-apache-cassandra-5.0, nextflow, thingsboard, kserve-modelmesh, sonar-scanner-cli, trino, cassandra...

CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: cassandra-fips, trino, nacos-docker, apache-nifi-registry, thingsboard, zookeeper, nacos, management-api-for-apache-cassandra-4.1, apache-nifi, akhq, dependency-track, knative-kafka-broker-fips, cassandra, kayenta, kayenta-fips, zookeeper-fips,...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: cassandra-fips, trino, nacos-docker, apache-nifi-registry, thingsboard, zookeeper, nacos, management-api-for-apache-cassandra-4.1, apache-nifi, akhq, dependency-track, knative-kafka-broker-fips, cassandra, kayenta, kayenta-fips, zookeeper-fips,...

EUVD-2025-31743

Malicious code in bioql PyPI...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852 Openshift-ai: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852

A CVE is reported for KServe ModelMesh container images: a build-time /etc/passwd file created with group-writable permissions allows a non-root container user, if they are in the root group, to modify /etc/passwd and add a user with any UID (including 0), enabling full container root access. Thi...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

PT-2025-39995

Name of the Vulnerable Software and Affected Versions KServe ModelMesh container images affected versions not specified Description A container privilege escalation flaw exists due to the /etc/passwd file being created with group-writable permissions during the build process. An attacker with the...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: apache-tika, wildfly, sonarqube, confluent-kafka, jenkins-plugin-manager, druid, apache-nifi-registry, cassandra-reaper, celeborn, jenkins, solr, maven-stage0, dependency-track, management-api-for-apache-cassandra-5.0, zipkin, apache-activemq-artemis,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: apache-tika, wildfly, sonarqube, confluent-kafka, jenkins-plugin-manager, druid, apache-nifi-registry, cassandra-reaper, celeborn, jenkins, solr, maven-stage0, dependency-track, management-api-for-apache-cassandra-5.0, zipkin, apache-activemq-artemis,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: cassandra-fips, zaproxy, zipkin, apache-nifi-registry, debezium-connector-spanner, ghidra, spark, thingsboard, kafka, elasticsearch-fips, py3-vllm-cuda-12.4, apache-tika, management-api-for-apache-cassandra-4.1, wildfly, apache-nifi, celeborn, nrjmx, sonarqube, akhq,...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: cassandra-fips, trino, sonarqube-10, thingsboard, management-api-for-apache-cassandra-4.1, apache-nifi, sonarqube, akhq, dependency-track, cassandra, tez, zookeeper-fips, management-api-for-apache-cassandra-4.0, sonar-scanner-cli, cassandra-reaper, ontop, ontop-fips,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: cassandra-fips, trino, sonarqube-10, thingsboard, management-api-for-apache-cassandra-4.1, apache-nifi, sonarqube, akhq, dependency-track, cassandra, tez, zookeeper-fips, management-api-for-apache-cassandra-4.0, sonar-scanner-cli, cassandra-reaper, ontop, ontop-fips,...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: cassandra-fips, trino, sonarqube-10, thingsboard, management-api-for-apache-cassandra-4.1, apache-nifi, sonarqube, akhq, dependency-track, cassandra, tez, zookeeper-fips, management-api-for-apache-cassandra-4.0, sonar-scanner-cli, cassandra-reaper, ontop, ontop-fips,...

GHSA-735F-PC8J-V9W8 vulnerabilities

Vulnerabilities for packages: ruby3.4-fluentd-kubernetes-daemonset, trino, emsdk, debezium-connector-spanner, sonarqube-10, thingsboard, kafka, hadoop-thirdparty, apache-nifi, celeborn, wavefront-proxy, kube-fluentd-operator, tez, ruby3.3-fluentd-kubernetes-daemonset, hadoop-client-modules,...