CVE-2024-31216

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...

CVE-2025-24375 MySQL K8s charm could leak credentials for root-level user `serverconfig`

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

Important: Red Hat Security Advisory: VolSync 0.12.1 security fixes and enhancements for RHEL 9

VolSync v0.12 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2024-45041

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets resources. It...

Important: Red Hat Security Advisory: VolSync 0.10.2 for RHEL 9

VolSync v0.10.2 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: VolSync 0.11.1 for RHEL 9

VolSync v0.11.1 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2024-31216

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...

Moderate: Red Hat Security Advisory: VolSync 0.9.1 security fixes and enhancements

VolSync v0.9.1 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: gitsign, bom, gitness, nuclei, go-licenses, scorecard, src-fingerprint, pulumi-kubernetes-operator, goreleaser...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: src-fingerprint, gitsign, pulumi-kubernetes-operator, gitness, go-licenses, bom, goreleaser, scorecard, nuclei...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: src-fingerprint, gitsign, pulumi-kubernetes-operator, gitness, go-licenses, bom, goreleaser, scorecard, nuclei...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: gitsign, bom, gitness, nuclei, go-licenses, scorecard, src-fingerprint, pulumi-kubernetes-operator, goreleaser...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, crossplane-provider-family-aws, pulumi-kubernetes-operator, argo-workflows, gitness, aactl, wolfictl, kubescape, crossplane-provider-aws-cloudfront, crossplane-provider-aws-dynamodb, gomplate, flux-notification-controller,...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, argo-events, argo-workflows, melange, task, argo-events-fips, flux-notification-controller, snyk-cli...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: task, snyk-cli, flux-notification-controller, argo-events, argo-workflows, pulumi-kubernetes-operator, melange...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, argo-events, argo-workflows, melange, task, argo-events-fips, flux-notification-controller, snyk-cli...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: task, snyk-cli, flux-notification-controller, argo-events, argo-workflows, pulumi-kubernetes-operator, melange...

Secret logging may occur in debug mode of Atlas Operator

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

Design/Logic Flaw

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

CVE-2023-0436

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...