EUVD-2025-31743

Malicious code in bioql PyPI...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852 Openshift-ai: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852 Openshift-ai: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852

A CVE is reported for KServe ModelMesh container images: a build-time /etc/passwd file created with group-writable permissions allows a non-root container user, if they are in the root group, to modify /etc/passwd and add a user with any UID (including 0), enabling full container root access. Thi...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852: Incorrect Default Permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

PT-2025-39995

Name of the Vulnerable Software and Affected Versions KServe ModelMesh container images affected versions not specified Description A container privilege escalation flaw exists due to the /etc/passwd file being created with group-writable permissions during the build process. An attacker with the...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: maven-stage0, management-api-for-apache-cassandra-5.0, akhq, jenkins, flyway, nrjmx, solr, apache-tika, druid, thingsboard, airflow, sonar-scanner-cli, apache-activemq-artemis, confluent-kafka, dependency-track, nextflow, wildfly, celeborn, apache-nifi,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: maven-stage0, management-api-for-apache-cassandra-5.0, akhq, jenkins, flyway, nrjmx, solr, apache-tika, druid, thingsboard, airflow, sonar-scanner-cli, apache-activemq-artemis, confluent-kafka, dependency-track, nextflow, wildfly, celeborn, apache-nifi,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: apicurio-registry, spark, apache-hop, leiningen, localstack, nrjmx, apache-hop-fips, keycloak-config-cli, nextflow, logstash, automq-fips, apache-nifi-registry, solr, sonarqube, confluent-kafka-jre-bcfips, thingsboard, automq, solr-fips, zaproxy, elasticsearch-fips,...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: sonarqube-10, sonarqube, thingsboard, ontop, tez, cassandra-reaper, kserve-modelmesh, akhq, ontop-fips, apache-nifi, sonar-scanner-cli, cassandra, hadoop-fips, management-api-for-apache-cassandra-4.0, cassandra-fips, zookeeper-fips,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: sonarqube-10, sonarqube, thingsboard, ontop, tez, cassandra-reaper, kserve-modelmesh, akhq, ontop-fips, apache-nifi, sonar-scanner-cli, cassandra, hadoop-fips, management-api-for-apache-cassandra-4.0, cassandra-fips, zookeeper-fips,...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: sonarqube-10, sonarqube, thingsboard, ontop, tez, cassandra-reaper, kserve-modelmesh, akhq, ontop-fips, apache-nifi, sonar-scanner-cli, cassandra, hadoop-fips, management-api-for-apache-cassandra-4.0, cassandra-fips, zookeeper-fips,...

GHSA-735F-PC8J-V9W8 vulnerabilities

Vulnerabilities for packages: sonarqube-10, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, confluent-kafka-jre-bcfips, thingsboard, knative-kafka-broker, opensearch, tez, kube-fluentd-operator, kserve-modelmesh, apache-nifi, confluent-kafka, kafka, hadoop-fips, druid,...