CVE-2025-25279

نشرة أمنية MMSA-2025-00430 / CVE-2025-25279 ملخص بعد رفع ملف إلى Mattermost Boards، عندما يتم تعديل معامل fileId ونسخ اللوحة، يشير الملف الآن إلى الملف الهدف المحدد في المعامل ويقوم بتنزيله. الإصدارات المتأثرة: حالات Mattermost مع تفعيل Boards CVE: CVE-2025-25279 الوصف تفشل إصدارات Mattermost...

GO-2026-6613 vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, php-fpmexporter, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, node-problem-detector, slsa-verifier, trivy-operator,...

GO-2026-6608 vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, php-fpmexporter, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, slsa-verifier, trivy-operator, cluster-proportional-autoscale...

CVE-2026-94440 vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, php-fpmexporter, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, slsa-verifier, trivy-operator, cluster-proportional-autoscale...

CVE-2026-97031 vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, php-fpmexporter, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, node-problem-detector, slsa-verifier, trivy-operator,...

GHSA-2GFW-J3C5-J46W vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, php-fpmexporter, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, node-problem-detector, slsa-verifier, trivy-operator,...

GO-2026-6599 vulnerabilities

Vulnerabilities for packages: authservice, mcp-grafana, certificate-transparency, osv-scanner, bank-vaults, policy-controller, crossplane-provider-aws-eks, steampipe, kubevela, slsa-verifier, trivy-operator, crossplane-provider-aws-iam, grafana-pyroscope, gitlab-pages, juicefs,...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, slsa-verifier, trivy-operator, cluster-proportional-autoscaler,...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, php-fpmexporter, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, node-problem-detector, slsa-verifier, trivy-operator,...

GHSA-22JX-P735-QCPM vulnerabilities

Vulnerabilities for packages: authservice, mcp-grafana, certificate-transparency, osv-scanner, bank-vaults, policy-controller, crossplane-provider-aws-eks, steampipe, kubevela, slsa-verifier, trivy-operator, crossplane-provider-aws-iam, grafana-pyroscope, gitlab-pages, juicefs,...

GHSA-HQ7W-2XRQ-WP2J vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, php-fpmexporter, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, node-problem-detector, slsa-verifier, trivy-operator,...

CVE-2026-97030 vulnerabilities

Vulnerabilities for packages: authservice, mcp-grafana, certificate-transparency, osv-scanner, bank-vaults, policy-controller, crossplane-provider-aws-eks, steampipe, kubevela, slsa-verifier, trivy-operator, crossplane-provider-aws-iam, grafana-pyroscope, gitlab-pages, juicefs,...

CVE-2026-94439 vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, php-fpmexporter, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, node-problem-detector, slsa-verifier, trivy-operator,...

GHSA-874M-FCC5-9GQF vulnerabilities

Vulnerabilities for packages: authservice, nri-kubernetes, mcp-grafana, php-fpmexporter, certificate-transparency, osv-scanner, bank-vaults, policy-controller, spark-operator, crossplane-provider-aws-eks, kubeflow, steampipe, kubevela, slsa-verifier, trivy-operator, cluster-proportional-autoscale...

GO-2026-6600 vulnerabilities

Vulnerabilities for packages: authservice, mcp-grafana, certificate-transparency, osv-scanner, bank-vaults, policy-controller, crossplane-provider-aws-eks, steampipe, kubevela, slsa-verifier, trivy-operator, crossplane-provider-aws-iam, grafana-pyroscope, gitlab-pages, juicefs,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: rke2-runtime, crossplane-provider-aws-rum-fips, k8ssandra-client-fips, crossplane-provider-aws-kafka-fips, kepler, gatekeeper, crossplane-provider-aws-servicediscovery, crossplane-provider-aws-apigatewayv2, k8s-device-plugin, crossplane-function-kcl,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: rke2-runtime, crossplane-provider-aws-rum-fips, k8ssandra-client-fips, crossplane-provider-aws-kafka-fips, kepler, gatekeeper, crossplane-provider-aws-servicediscovery, crossplane-provider-aws-apigatewayv2, k8s-device-plugin, crossplane-function-kcl,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: rke2-runtime, crossplane-provider-aws-rum-fips, k8ssandra-client-fips, crossplane-provider-aws-kafka-fips, kepler, gatekeeper, crossplane-provider-aws-servicediscovery, crossplane-provider-aws-apigatewayv2, k8s-device-plugin, crossplane-function-kcl,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: rke2-runtime, crossplane-provider-aws-rum-fips, k8ssandra-client-fips, crossplane-provider-aws-kafka-fips, kepler, gatekeeper, crossplane-provider-aws-servicediscovery, crossplane-provider-aws-apigatewayv2, k8s-device-plugin, crossplane-function-kcl,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: rke2-runtime, crossplane-provider-aws-rum-fips, k8ssandra-client-fips, crossplane-provider-aws-kafka-fips, kepler, gatekeeper, crossplane-provider-aws-servicediscovery, crossplane-provider-aws-apigatewayv2, k8s-device-plugin, crossplane-function-kcl,...