GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: configmap-reload, thanos-operator, cass-operator, promxy, nri-f5, k9s, shfmt, esbuild, minify, cloudnative-pg, cni-plugins, flux-helm-controller, flux-kustomize-controller, velero-plugin-for-microsoft-azure, gostatsd, kubewatch, aws-flb-kinesis, mods, oras, xcaddy,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: configmap-reload, newrelic-infrastructure-agent, thanos-operator, minio, cass-operator, gh, mongo-tools, ctop, nri-f5, amass, govulncheck, helm-operator, metrics-server, velero, flux-image-reflector-controller, kustomize, shfmt, esbuild, prometheus-operator,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: configmap-reload, newrelic-infrastructure-agent, thanos-operator, minio, cass-operator, gh, mongo-tools, ctop, nri-f5, amass, govulncheck, helm-operator, metrics-server, velero, flux-image-reflector-controller, kustomize, shfmt, esbuild, prometheus-operator,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: dockerize, helm-operator, newrelic-fluent-bit-output, nri-kafka, prometheus-pushgateway-fips, metrics-server-fips, kubeflow-katib, kubernetes-csi-external-resizer, kubernetes-dashboard-fips, nats, prometheus-beat-exporter-fips, kpt, crossplane-provider-azure,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: etcd-fips, helm-operator, osv-scanner, newrelic-fluent-bit-output, eck-operator, kubernetes-dashboard-fips, kpt, crossplane-provider-azure, mongo-tools, docker-credential-ecr-login, cass-operator-fips, render-template, caddy-fips, dynamic-localpv-provisioner-fips,...

The vulnerability of the populate() function in the Mongoose library allows a hacker to execute arbitrary code and gain access to read and modify data.

The vulnerability of the populate function in the Mongoose library is related to improper code generation when using the $where operator. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain access to read and modify data...

The vulnerability of the Mongoose library, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary code and gain access to read and modify data.

The vulnerability of the Mongoose library relates to the lack of protection for the SQL query structure when the $where operator is used. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain access to read and modify data...

sendabienesraices.com Improper Access Control vulnerability OBB-4027564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SSRF in sliver teamserver

Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...

Important: Red Hat Security Advisory: Cluster Observability Operator 1.0.0

The Cluster Observability Operator COO is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions CRDs. With this release, COO gets to GA availability...

control-messe.de Cross Site Scripting vulnerability OBB-4024543

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Low: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: PCI: Keystone: Fixed the if-statement expression in kspciequirk. This code accidentally used && where || was intended. This could potentially lead to a NULL derefrence error. Therefore, the if-statement expression should be...

PT-2025-6424

Name of the Vulnerable Software and Affected Versions NVIDIA Container Toolkit versions up to and including 1.17.3 NVIDIA GPU Operator versions up to and including 24.9.1 Description NVIDIA Container Toolkit and NVIDIA GPU Operator are affected by a Time-of-Check Time-of-Use TOCTOU vulnerability...

CVE-2025-24970 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, seata, celeborn, logstash, tez, apache-nifi, kafka, management-api-for-apache-cassandra-5.0, zookeeper-fips, management-api-for-apache-cassandra-4.1, apicurio-registry, akhq, management-api-for-apache-cassandra-4.0, elasticsearch, cassandra-reaper,...

CVE-2025-24970 vulnerabilities

Vulnerabilities for packages: flyway, strimzi-kafka-operator, apache-nifi, wildfly, trino, tez, apache-pulsar, wavefront-proxy, docker-selenium, akhq, opensearch, apache-activemq-artemis, apicurio-registry, kserve-modelmesh, celeborn, zookeeper, thingsboard, druid, selenium, cloudwatch-exporter,...