CLEANSTART-2026-IL55587 Cancelling a query (e

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. Cancelling a query e. See references for individual vulnerability details...

Important: Red Hat Security Advisory: VolSync v0.14 security fixes and container updates

VolSync v0.14 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2021-41254

kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Users that can create Kubernetes Secrets, Service Accounts and Flux Kustomization objects, could...

Moderate: Red Hat Security Advisory: Submariner v0.22 security fixes and container updates

Submariner v0.22 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2025-64171 MARIN3R: Cross-Namespace Vulnerability in the Operator

MARIN3R is a lightweight, CRD based envoy control plane for kubernetes. In versions 0.13.3 and below, there is a cross-namespace secret access vulnerability in the project's DiscoveryServiceCertificate which allows users to bypass RBAC and access secrets in unauthorized namespaces. This issue is...

vmalert-operator

VMAlert Operator ⚠️ Proof of Concept Bridge Grafana Aler...

EUVD-2021-2283

Malware in sbrugna...

EUVD-2020-28853

Malware in sbrugna...

EUVD-2023-12491

Malicious code in bioql PyPI...

EUVD-2024-1788

Malicious code in bioql PyPI...

EUVD-2024-2861

Malicious code in bioql PyPI...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: vault-k8s, terraform-provider-time, confluent-common-docker, newrelic-nri-statsd, kserve-rest-proxy, secrets-store-csi-driver-provider-aws, mongodb-kubernetes-operator, pvc-autoresizer, rancher-machine, sftpgo-plugin-pubsub, git-lfs, container-object-storage-interfac...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: vault-k8s, terraform-provider-time, confluent-common-docker, newrelic-nri-statsd, kserve-rest-proxy, secrets-store-csi-driver-provider-aws, mongodb-kubernetes-operator, pvc-autoresizer, rancher-machine, sftpgo-plugin-pubsub, git-lfs, container-object-storage-interfac...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: prometheus-process-exporter, stakater-reloader, mattmoor-chainit, octo-sts, gcp-compute-persistent-disk-csi-driver-fips, blob-csi-fips, karpenter-fips, blobfuse2, karma-fips, prometheus-adapter, nvidia-nsight-compute-12.8, vault-benchmark, eks-distro-fips, nemo,...

weblogic-monitoring-exporter

This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...

Important: Red Hat Security Advisory: VolSync v0.12 security fixes and container updates

VolSync v0.12 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2024-31216

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...

CVE-2025-24375 MySQL K8s charm could leak credentials for root-level user `serverconfig`

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

Important: Red Hat Security Advisory: VolSync 0.12.1 security fixes and enhancements for RHEL 9

VolSync v0.12 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2024-45041

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets resources. It...