EUVD-2024-0421

Malicious code in bioql PyPI...

External Data Extraction Attacks against Retrieval-Augmented Large Language Models

In recent years, RAG has emerged as a key paradigm for enhancing large language models LLMs. By integrating externally retrieved information, RAG alleviates issues like outdated knowledge and, crucially, insufficient domain expertise. While effective, RAG introduces new risks of external data...

Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to incorrect binary execution [CVE-2025-47906]

Summary IBM App Connect Enterprise Certified Container operator and operands contain Golang binaries that are vulnerable to incorrect binary exection. This bulletin provides patch information to address the reported vulnerability in Golang module os/exec. CVE-2025-47906 Vulnerability Details...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.7.0 release

Red Hat OpenShift distributed tracing platform Tempo 3.7.0 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides new features, security improvements, and bug fixes. Breaking changes: Nothing Deprecations: Nothing Technology Preview features: Nothing...

Finding Phones Fast: Low-Latency and Scalable Monitoring of Cellular Communications in Sensitive Areas

The widespread availability of cellular devices introduces new threat vectors that allow users or attackers to bypass security policies and physical barriers and bring unauthorized devices into sensitive areas. These threats can arise from user non-compliance or deliberate actions aimed at data...

Incorrect Calculation

Overview tensorflow is a machine learning framework. Affected versions of this package are vulnerable to Incorrect Calculation via the Embedding operator that always outputs 0 without XLA when inputdim=1 is set. An attacker can cause the application to produce unpredictable or incorrect outputs b...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-22874 DESCRIPTION: Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, nri-f5, kind, emissary, nri-apache, spire-controller-manager, kubernetes-dashboard, aws-otel-collector, oauth2-proxy, migrate, kubernetes-csi-driver-hostpath, kubernetes-dashboard-api, aws-application-networking-k8s, eksctl,...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, nri-mysql, vault, helm-set-status, consul-k8s, delve, tigera-operator, docker-machine-driver-harvester, undock, mongo-tools, falcoctl, kube-bench, rabbitmq-cluster-operator, rancher, blob-csi, chartmuseum, gobump, opa, cloud-sql-proxy, nuclei,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, nri-mysql, vault, helm-set-status, consul-k8s, delve, tigera-operator, docker-machine-driver-harvester, undock, mongo-tools, falcoctl, kube-bench, rabbitmq-cluster-operator, rancher, blob-csi, chartmuseum, gobump, opa, cloud-sql-proxy, nuclei,...

Migrating Veeam Kasten for Kubernetes to the Red Hat Certified Operators Catalog

Challenge One or more of the following symptoms may be observed in a Red Hat OpenShift environment running Veeam Kasten for Kubernetes : Upgrades are no longer available for the Veeam Kasten operator installed from the Red Hat Operator Marketplace catalog. Veeam Kasten Enterprise - Term or Veeam...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.9 and Red Hat build of Keycloak 26.2.9 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

openSUSE Security Advisory (SUSE-SU-2025:03278-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-58767 vulnerabilities

Vulnerabilities for packages: jruby, kube-fluentd-operator...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, kube-vip-cloud-provider, vault-benchmark, linkerd2-proxy-init, bank-vaults, rancher-machine, k8sgpt-operator, checksec, gostatsd, mongodb-kubernetes-operator, ctop, sftpgo-plugin-pubsub, lvm-driver, sftpgo-plugin-geoipfilter,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, kube-vip-cloud-provider, vault-benchmark, linkerd2-proxy-init, bank-vaults, rancher-machine, k8sgpt-operator, checksec, gostatsd, mongodb-kubernetes-operator, ctop, sftpgo-plugin-pubsub, lvm-driver, sftpgo-plugin-geoipfilter,...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: jruby, kube-fluentd-operator...

CVE-2025-58767 vulnerabilities

Vulnerabilities for packages: logstash, gitlab-rails-ce, jruby, kube-fluentd-operator, truffleruby, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, gitlab-rails-ce-fips...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, confluent-common-docker, node-problem-detector-fips, gitsign, container-object-storage-interface, nvidia-nsight-compute-12.8, prometheus-nats-exporter, secrets-store-csi-driver-provider-aws-fips, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub,...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: logstash, gitlab-rails-ce, jruby, kube-fluentd-operator, truffleruby, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, gitlab-rails-ce-fips...