GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: rancher-helm, cilium-cli, k8ssandra-client, flux, harbor, trivy-fips, chart-testing, flux-helm-controller-fips, harbor-fips, helm-operator-fips, eksctl, zot, flux-helm-controller, flux-source-controller, helm-operator, chart-testing-fips, kubescape, consul-k8s-fips,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: rancher-helm, cilium-cli, k8ssandra-client, flux, harbor, trivy-fips, chart-testing, flux-helm-controller-fips, harbor-fips, helm-operator-fips, eksctl, zot, flux-helm-controller, flux-source-controller, helm-operator, chart-testing-fips, kubescape, consul-k8s-fips,...

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

SUSE-SU-2025:20184-1 Security update for elemental-operator

This update for elemental-operator fixes the following issues: - Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the...

Security update for elemental-operator

This update for elemental-operator fixes the following issues: Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the K...

messmittel-exakt.de Cross Site Scripting vulnerability OBB-4043504

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

casemephi.com Cross Site Scripting vulnerability OBB-4043288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ibw.at Cross Site Scripting vulnerability OBB-4043184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

toolkits.horiba-abx.com Cross Site Scripting vulnerability OBB-4043142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: azure-service-operator, kaniko, nri-elasticsearch, kubernetes-dashboard-web, undock, prometheus-alertmanager, hivemind, terraform-provider-kubernetes, grafana-mimir, golangci-lint, nri-couchbase, velero, promxy, sbom-scorecard, oras, docker-cli, kubewatch, bank-vault...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: azure-service-operator, kaniko, nri-elasticsearch, kubernetes-dashboard-web, undock, prometheus-alertmanager, hivemind, terraform-provider-kubernetes, grafana-mimir, golangci-lint, nri-couchbase, velero, promxy, sbom-scorecard, oras, docker-cli, kubewatch, bank-vault...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: syft, checksec, docker-credential-ecr-login, google-guest-agent-manager, prometheus-podman-exporter, ytt-fips, dagdotdev, cluster-proportional-autoscaler-fips, gostatsd, kyverno-policy-reporter-ui, dataplaneapi, kubernetes-event-exporter-fips, kbld, helm-operator-fip...

canoe-europe.org Cross Site Scripting vulnerability OBB-4043070

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m.politik-lexikon.at Cross Site Scripting vulnerability OBB-4043057

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

firstname-bordeaux.hoteldebordeaux.net Cross Site Scripting vulnerability OBB-4043026

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

filler-schatz.de Cross Site Scripting vulnerability OBB-4043000

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

financia-business-school.com Cross Site Scripting vulnerability OBB-4042996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...