CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, flux-notification-controller, actions-runner-controller, helm-operator, sbom-convert, cilium-cli, cloud-provider-aws, kubernetes-event-exporter, bento, ytt, terraform-docs, sops, kapp, goreleaser, crossplane-provider-aws-lambda,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, flux-notification-controller, crossplane-provider-aws-lambda, protoc-gen-go-grpc, ksops, nri-rabbitmq, terraform-mcp-server, crossplane-provider-aws-elasticache, kubernetes-csi-node-driver-registrar, newrelic-infra-operator, kratos, influx,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, flux-notification-controller, actions-runner-controller, helm-operator, nri-haproxy, cilium-cli, cloud-provider-aws, kubernetes-event-exporter, bento, ytt, terraform-docs, sops, kapp, goreleaser, crossplane-provider-aws-lambda,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, flux-notification-controller, crossplane-provider-aws-lambda, protoc-gen-go-grpc, ksops, nri-rabbitmq, terraform-mcp-server, crossplane-provider-aws-elasticache, kubernetes-csi-node-driver-registrar, newrelic-infra-operator, kratos, influx,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, flux-notification-controller, crossplane-provider-aws-lambda, protoc-gen-go-grpc, ksops, nri-rabbitmq, terraform-mcp-server, crossplane-provider-aws-elasticache, kubernetes-csi-node-driver-registrar, newrelic-infra-operator, kratos, influx,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, flux-notification-controller, actions-runner-controller, helm-operator, sbom-convert, cilium-cli, cloud-provider-aws, kubernetes-event-exporter, bento, ytt, terraform-docs, sops, kapp, goreleaser, crossplane-provider-aws-lambda,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, flux-notification-controller, crossplane-provider-aws-lambda, protoc-gen-go-grpc, ksops, nri-rabbitmq, terraform-mcp-server, crossplane-provider-aws-elasticache, kubernetes-csi-node-driver-registrar, newrelic-infra-operator, kratos, influx,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cert-manager-openshift-routes-fips, neuvector-fips, ksops, bento, flux-image-automation-controller, prometheus-alertmanager-fips, knative-serving-fips, prometheus-postgres-exporter, crossplane-provider-aws-kinesis-fips, temporal-ui-server,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cert-manager-openshift-routes-fips, neuvector-fips, ksops, bento, flux-image-automation-controller, prometheus-alertmanager-fips, knative-serving-fips, prometheus-postgres-exporter, crossplane-provider-aws-kinesis-fips, temporal-ui-server,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cert-manager-openshift-routes-fips, flannel-cni-plugin-fips, neuvector-fips, nri-nagios, ksops, bento, flux-image-automation-controller, prometheus-alertmanager-fips, knative-serving-fips, prometheus-postgres-exporter,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cert-manager-openshift-routes-fips, flannel-cni-plugin-fips, neuvector-fips, nri-nagios, ksops, bento, flux-image-automation-controller, prometheus-alertmanager-fips, knative-serving-fips, prometheus-postgres-exporter,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cert-manager-openshift-routes-fips, flannel-cni-plugin-fips, neuvector-fips, nri-nagios, ksops, bento, flux-image-automation-controller, prometheus-alertmanager-fips, knative-serving-fips, prometheus-postgres-exporter,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cert-manager-openshift-routes-fips, flannel-cni-plugin-fips, neuvector-fips, nri-nagios, ksops, bento, flux-image-automation-controller, prometheus-alertmanager-fips, knative-serving-fips, prometheus-postgres-exporter,...

CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

CVE-2025-71183

CVE-2025-71183 (Linux kernel, btrfs) : The issue arises during rename exchanges where directories involved may not have their last_unlink_trans updated, causing the log replay path to miss a conflicting inode in the log tree. After a power failure, this can trigger an incorrect deletion attempt o...

CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

EUVD-2025-206592

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

CVE-2026-0936

An Insertion of Sensitive Information into Log File vulnerability in B PVI client versions prior to 6.5 may be abused by an authenticated local attacker to gather credential information which is processed by the PVI client application. The logging function of the PVI client application is disable...

WordPress coreActivity plugin < 2.1 - Unauthenticated IP Spoofing vulnerability

Unauthenticated IP Spoofing vulnerability discovered by Erwan LR WPScan in WordPress Plugin coreActivity: Activity Logging plugin for WordPress versions 2.1...

CVE-2026-0936

An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to gather credential information which is processed by the PVI client application. The logging function of the PVI client application is...