CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, dependency-track, akhq, apache-nifi, apache-nifi-registry, management-api-for-apache-cassandra-5.0, trino, thingsboard, nextflow, zookeeper, keycloak-config-cli, kserve-modelmesh, cassandra-reaper, cassandra...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, zookeeper-fips, localstack, management-api-for-apache-cassandra-4.0, keycloak-config-cli, ontop-fips, akhq, sonar-scanner-cli, thingsboard, apache-nifi, cassandra-fips, management-api-for-apache-cassandra-5.0, knative-kafka-broker, trino,...

CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, zookeeper-fips, localstack, management-api-for-apache-cassandra-4.0, keycloak-config-cli, ontop-fips, akhq, sonar-scanner-cli, thingsboard, apache-nifi, cassandra-fips, management-api-for-apache-cassandra-5.0, knative-kafka-broker, trino,...

EUVD-2025-31743

Malicious code in bioql PyPI...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852 Openshift-ai: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852

A CVE is reported for KServe ModelMesh container images: a build-time /etc/passwd file created with group-writable permissions allows a non-root container user, if they are in the root group, to modify /etc/passwd and add a user with any UID (including 0), enabling full container root access. Thi...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

PT-2025-39995

Name of the Vulnerable Software and Affected Versions KServe ModelMesh container images affected versions not specified Description A container privilege escalation flaw exists due to the /etc/passwd file being created with group-writable permissions during the build process. An attacker with the...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, logstash, flyway, apache-nifi-registry, zipkin, gradle, management-api-for-apache-cassandra-5.0, maven-stage0, wildfly, keycloak-config-cli, airflow, akhq, apicurio-registry, spark, solr, thingsboard, cassandra-reaper, jenkins-plugin-manager,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, logstash, flyway, apache-nifi-registry, zipkin, gradle, management-api-for-apache-cassandra-5.0, maven-stage0, wildfly, keycloak-config-cli, airflow, akhq, apicurio-registry, spark, solr, thingsboard, cassandra-reaper, jenkins-plugin-manager,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: elasticsearch, solr, jenkins-plugin-manager, kafka, airflow, apicurio-registry, hadoop-client-modules, leiningen, hadoop-fips, localstack, management-api-for-apache-cassandra-4.0, spark-fips, keycloak-config-cli, apache-hop, apache-hop-fips, akhq, sonar-scanner-cli,...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: zookeeper-fips, management-api-for-apache-cassandra-4.0, ontop-fips, akhq, sonar-scanner-cli, thingsboard, apache-nifi, cassandra-fips, management-api-for-apache-cassandra-5.0, trino, kserve-modelmesh, sonarqube-10, ontop, cassandra,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: zookeeper-fips, management-api-for-apache-cassandra-4.0, ontop-fips, akhq, sonar-scanner-cli, thingsboard, apache-nifi, cassandra-fips, management-api-for-apache-cassandra-5.0, trino, kserve-modelmesh, sonarqube-10, ontop, cassandra,...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: zookeeper-fips, management-api-for-apache-cassandra-4.0, ontop-fips, akhq, sonar-scanner-cli, thingsboard, apache-nifi, cassandra-fips, management-api-for-apache-cassandra-5.0, trino, kserve-modelmesh, sonarqube-10, ontop, cassandra,...

GHSA-735F-PC8J-V9W8 vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, hadoop-client-modules, hadoop-fips, kube-fluentd-operator, emsdk, thingsboard, apache-nifi, ruby3.3-fluentd-kubernetes-daemonset, knative-kafka-broker, druid, kserve-modelmesh, sonarqube-10, trino, wavefront-proxy, hadoop-thirdparty,...