MAL-2025-24149 Malicious code in k8s-ssdeployer (npm)

The package k8s-ssdeployer was found to contain malicious code...

MAL-2025-24150 Malicious code in k8s-template-validator (npm)

The package k8s-template-validator was found to contain malicious code...

CVE-2025-24313

Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may allow a privileged user to potentially enable denial of service via local access...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2024-45339 DESCRIPTION: When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log fil...

Security update for kubernetes1.26

This update for kubernetes1.26 fixes the following issues: CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2025:02383-2 Security update for kubernetes1.26

This update for kubernetes1.26 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865...

Security update for kubernetes1.23

This update for kubernetes1.23 fixes the following issues: CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2025:01940-2 Security update for kubernetes1.23

This update for kubernetes1.23 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865...

Security update for helm

This update for helm fixes the following issues: Update to version 3.18.4 bsc1246152, CVE-2025-53547: Disabling linter due to unknown issue f20a4ad Matt Farina builddeps: bump the k8s-io group with 7 updates 563b094 dependabotbot Updating link handling 00de613 Matt Farina Patch Instructions: To...

SUSE-SU-2025:20595-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.18.4 bsc1246152, CVE-2025-53547: Disabling linter due to unknown issue f20a4ad Matt Farina builddeps: bump the k8s-io group with 7 updates 563b094 dependabotbot Updating link handling 00de613 Matt Farina...

ROS-20250814-02

Ingress controller vulnerability in Kubernetes ingress-nginx cluster is related to errors in the processing of Ingress object annotations. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...

Helm 安全漏洞

Helm is a Kubernetes package manager from the CNCF Foundation. A security vulnerability exists in Helm versions prior to 3.18.5, which stems from improper validation of type errors and could cause the program to crash...

CVE-2025-55198 Helm May Panic Due To Incorrect YAML Content

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring YAML files are formatted as Helm expect...

CVE-2025-55199

CVE-2025-55199 (Helm) : Pre-3.18.5 Helm can craft a JSON Schema file that may cause Helm to consume all memory and terminate with an OOM. The issue is resolved in Helm 3.18.5. A workaround is to ensure loaded charts do not reference /dev/zero via $ref. Remediation: upgrade to Helm 3.18.5 or later...

Security update for kubernetes1.23

This update for kubernetes1.23 fixes the following issues: CVE-2021-25743: Escape terminal special characters in kubectl output bsc1194400. CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement bsc1212493. CVE-2024-0793: Advance autoscaling v2 as the preferred API version...

SUSE-SU-2025:02423-2 Security update for kubernetes1.23

This update for kubernetes1.23 fixes the following issues: - CVE-2021-25743: Escape terminal special characters in kubectl output bsc1194400. - CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement bsc1212493. - CVE-2024-0793: Advance autoscaling v2 as the preferred API version...

PT-2025-33104

Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.18.5 Description: Helm, a package manager for Kubernetes Charts, is susceptible to a denial-of-service issue. A crafted JSON Schema file can cause Helm to exhaust available memory, leading to an out-of-memory OOM...

Improper Access Control

Overview Affected versions of this package are vulnerable to Improper Access Control in certain device plugins, which can allow denial of service. Remediation Upgrade github.com/intel/intel-device-plugins-for-kubernetes/cmd/internal/labeler to version 0.32.0 or higher. References - GitHub Commit ...

CVE-2025-24313

Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2025-24313

CVE-2025-24313 affects Intel Device Plugins for Kubernetes prior to version 0.32.0. The root cause is improper access control in certain device plugin components, which can allow a privileged local attacker to trigger a denial of service, affecting availability. The official Intel advisory and co...