picklescan vulnerable to arbitrary file create using logging.FileHandler

Summary Unsafe pickle deserialization allows unauthenticated attackers to perform Arbitrary File Creation. By chaining the logging.FileHandler class, an attacker can bypass RCE-focused blocklists to create empty files on the server. The vulnerability allows creating zero-byte files in arbitrary...

SUSE CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

SMCP: Secure Model Context Protocol

Agentic AI systems built around large language models LLMs are moving away from closed, single-model frameworks and toward open ecosystems that connect a variety of agents, external tools, and resources. The Model Context Protocol MCP has emerged as a standard to unify tool access, allowing agent...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: flux-notification-controller, opensearch-k8s-operator, fuse-overlayfs-snapshotter, headlamp, bom, mattermost, aactl, k3s, mc, falco-no-driver, xeol, kine, redka, croc, osv-scanner, src, aws-flb-cloudwatch, ferretdb, conftest, cosign, aws-flb-kinesis, thanos-operator,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, opensearch-k8s-operator, fuse-overlayfs-snapshotter, headlamp, bom, mattermost, aactl, k3s, mc, falco-no-driver, xeol, kine, redka, croc, osv-scanner, src, aws-flb-cloudwatch, ferretdb, conftest, cosign, aws-flb-kinesis, thanos-operator,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: podinfo, mattermost, wire-go, capslock, crossplane-provider-aws-rds, spqr, kubernetes-event-exporter, rancher-loglevel, swagger, gatus, nri-redis, cluster-autoscaler, http-echo, runc, kubernetes-release, openbao-k8s, crossplane-provider-aws-cloudwatchlogs, paranoia,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: podinfo, mattermost, wire-go, capslock, crossplane-provider-aws-rds, spqr, kubernetes-event-exporter, rancher-loglevel, swagger, gatus, nri-redis, cluster-autoscaler, http-echo, runc, kubernetes-release, openbao-k8s, crossplane-provider-aws-cloudwatchlogs, paranoia,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, podinfo, crossplane-provider-family-aws, ghaudit, cluster-api-gcp-controller, azure-service-operator, conjur-cli, local-static-provisioner, mattermost, k3s, crossplane-provider-aws-rds, spqr, flannel, wuzz, apache-exporter,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: podinfo, mattermost, wire-go, capslock, crossplane-provider-aws-rds, spqr, kubernetes-event-exporter, rancher-loglevel, swagger, gatus, nri-redis, cluster-autoscaler, http-echo, runc, kubernetes-release, openbao-k8s, crossplane-provider-aws-cloudwatchlogs, paranoia,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: podinfo, mattermost, wire-go, capslock, crossplane-provider-aws-rds, spqr, kubernetes-event-exporter, rancher-loglevel, swagger, gatus, nri-redis, cluster-autoscaler, http-echo, runc, kubernetes-release, openbao-k8s, crossplane-provider-aws-cloudwatchlogs, paranoia,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, podinfo, crossplane-provider-family-aws, ghaudit, cluster-api-gcp-controller, azure-service-operator, conjur-cli, local-static-provisioner, mattermost, k3s, crossplane-provider-aws-rds, spqr, flannel, wuzz, apache-exporter,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, podinfo, crossplane-provider-family-aws, ghaudit, cluster-api-gcp-controller, azure-service-operator, conjur-cli, local-static-provisioner, mattermost, k3s, crossplane-provider-aws-rds, spqr, flannel, wuzz, apache-exporter,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, podinfo, crossplane-provider-family-aws, ghaudit, cluster-api-gcp-controller, azure-service-operator, conjur-cli, local-static-provisioner, mattermost, k3s, crossplane-provider-aws-rds, spqr, flannel, wuzz, apache-exporter,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, longhorn-instance-manager, prometheus-adapter-fips, longhorn-cli, kubernetes-csi-external-provisioner, prometheus-nats-exporter-fips, syncthing, terraform-ls, sealed-secrets, chart-testing, newrelic-nri-statsd, nri-rabbitmq, ceph-csi-operator,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, longhorn-instance-manager, prometheus-adapter-fips, longhorn-cli, kubernetes-csi-external-provisioner, prometheus-nats-exporter-fips, syncthing, terraform-ls, sealed-secrets, chart-testing, newrelic-nri-statsd, nri-rabbitmq, ceph-csi-operator,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, sftpgo-plugin-auth, longhorn-instance-manager, prometheus-adapter-fips, longhorn-cli, kubernetes-csi-external-provisioner, prometheus-nats-exporter-fips, syncthing, terraform-ls, sealed-secrets, chart-testing, newrelic-nri-statsd, age-fips,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, sftpgo-plugin-auth, longhorn-instance-manager, prometheus-adapter-fips, longhorn-cli, kubernetes-csi-external-provisioner, prometheus-nats-exporter-fips, syncthing, terraform-ls, sealed-secrets, chart-testing, newrelic-nri-statsd, age-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, sftpgo-plugin-auth, longhorn-instance-manager, prometheus-adapter-fips, longhorn-cli, kubernetes-csi-external-provisioner, prometheus-nats-exporter-fips, syncthing, terraform-ls, sealed-secrets, chart-testing, newrelic-nri-statsd, age-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, sftpgo-plugin-auth, longhorn-instance-manager, prometheus-adapter-fips, longhorn-cli, kubernetes-csi-external-provisioner, prometheus-nats-exporter-fips, syncthing, terraform-ls, sealed-secrets, chart-testing, newrelic-nri-statsd, age-fips,...

CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...