GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, xeol, grafana-rollout-operator, crossplane-provider-aws-s3, litefs, external-dns, cri-tools, kor, crossplane-provider-sql, gobuster, clickhouse-operator, guac, spire-serve...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, docker-machine-driver-linode, xeol, container-object-storage-interface, flux-image-automation-controller, terraform-provider-time, croc, x509-certificate-exporter, hydra,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, xeol, grafana-rollout-operator, crossplane-provider-aws-s3, litefs, external-dns, cri-tools, kor, crossplane-provider-sql, gobuster, clickhouse-operator, guac, spire-serve...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, docker-machine-driver-linode, xeol, container-object-storage-interface, flux-image-automation-controller, terraform-provider-time, croc, x509-certificate-exporter, hydra,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, kubeflow-pipelines, minio, kserve-modelmesh-serving, docker-machine-driver-linode, xeol, container-object-storage-interface, flux-image-automation-controller, terraform-provider-time, croc, x509-certificate-exporter, hydra, nats-top,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, mkcert, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, mkcert, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, mkcert, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, mkcert, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kapp, gitlab-runner-fips, pulumi-language-yaml, kubernetes-replicator, k6, mkcert, headlamp-fips, chisel, gitness, docker-credential-acr-env, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, knative-client, redis-operator,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nri-rabbitmq, kubeflow-pipelines, kserve-modelmesh-serving, opa, pluto, grafana-rollout-operator, terraform-provider-azurerm, external-dns, kor, gobuster, gitsign, nri-apache, guac, spire-server, nri-discovery-kubernetes, ctop, k8sgateway, kuberay-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, nemo, kuberay-operator, k8sgpt-operator, vault-k8s, php-fpmexporter, pvc-autoresizer, blob-csi-fips, linkerd2-proxy-init, mattmoor-chainit, memcached-exporter-fips, nvidia-nsight-compute-13.1, nats, gostatsd, terraform-provider-tls-fips, eks-distro-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: buf, kubernetes-replicator, k6, mkcert, vgpu-util, gitness, peerdb-flow, prometheus-redis-exporter, argo-rollouts-fips, vault-fips, conftest, kbld, smarter-device-manager, steampipe, falco-exporter, metallb, azure-aad-pod-identity-mic, kbld-fips, kiam, cert-manager,...

Moderate: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.4

Logging for Red Hat OpenShift - 6.2.4 Red Hat OpenShift Logging 6.2.4 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...