AZL-60409 CVE-2024-56406 affecting package perl for versions less than 5.38.2-507

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

UBUNTU-CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, zarf, flux-source-controller, chart-testing, k9s, flux, kubescape, pluto, cilium-cli, kots, rancher-helm, helm-operator, tw, cert-manager-cmctl, zot, chartmuseum, eksctl, helm-docs, trivy, helm-push, cluster-api-helm-controller, flux-helm-controller...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: k8ssandra-client, zarf, flux-source-controller, chart-testing, k9s, flux, kubescape, pluto, cilium-cli, kots, rancher-helm, helm-operator, tw, cert-manager-cmctl, zot, chartmuseum, eksctl, helm-docs, trivy, helm-push, cluster-api-helm-controller, flux-helm-controller...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, zarf, flux-source-controller, chart-testing, k9s, flux, kubescape, pluto, cilium-cli, kots, rancher-helm, helm-operator, tw, cert-manager-cmctl, zot, chartmuseum, eksctl, helm-docs, trivy, helm-push, cluster-api-helm-controller, flux-helm-controller...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, zarf, flux-source-controller, chart-testing, k9s, flux, kubescape, pluto, cilium-cli, kots, rancher-helm, helm-operator, tw, cert-manager-cmctl, zot, chartmuseum, eksctl, helm-docs, trivy, helm-push, cluster-api-helm-controller, flux-helm-controller...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: helm-operator, cilium-cli, kots, harbor, helm-operator-fips, chart-testing-fips, flux-helm-controller-fips, trivy-fips, zot, chart-testing, zarf, chartmuseum-fips, rancher-helm, chartmuseum, flux-source-controller, flux-source-controller-fips, tw, harbor-fips,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: helm-operator, cilium-cli, kots, harbor, helm-operator-fips, chart-testing-fips, flux-helm-controller-fips, trivy-fips, zot, chart-testing, zarf, chartmuseum-fips, rancher-helm, chartmuseum, flux-source-controller, flux-source-controller-fips, tw, harbor-fips,...

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

SUSE-SU-2025:20184-1 Security update for elemental-operator

This update for elemental-operator fixes the following issues: - Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the...

Security update for elemental-operator

This update for elemental-operator fixes the following issues: Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the K...

messmittel-exakt.de Cross Site Scripting vulnerability OBB-4043504

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

casemephi.com Cross Site Scripting vulnerability OBB-4043288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ibw.at Cross Site Scripting vulnerability OBB-4043184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

toolkits.horiba-abx.com Cross Site Scripting vulnerability OBB-4043142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: gatus, prometheus-adapter, step-issuer, octo-sts, dynamic-localpv-provisioner, mailpit, gitleaks, kubernetes-csi-external-provisioner, amazon-k8s-cni, goreleaser, docker-cli-buildx, metallb, falcosidekick, velero-plugin-for-microsoft-azure, mongo-tools, dgraph,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: gatus, prometheus-adapter, step-issuer, octo-sts, dynamic-localpv-provisioner, mailpit, gitleaks, kubernetes-csi-external-provisioner, amazon-k8s-cni, goreleaser, docker-cli-buildx, metallb, falcosidekick, velero-plugin-for-microsoft-azure, mongo-tools, dgraph,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: step-issuer, tkn, nri-mssql, flux-image-reflector-controller-fips, q, supercronic, sbomqs, mongo-tools-fips, opensearch-k8s-operator, nri-haproxy, docker-credential-acr-env, prometheus-mysqld-exporter, etcd, thanos-fips, nri-jmx, snyk-cli, kubewatch, rancher-agent,...