CVE-2020-7968 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

EUVD-2025-201467

nitro-tpm-pcr-compute may allow kernel command line modification by an account operator...

GHSA-XRV8-2PF5-F3Q7 nitro-tpm-pcr-compute may allow kernel command line modification by an account operator

Summary Adding default PCR12 validation to ensure that account operators can not modify kernel command line parameters, potentially bypassing root filesystem integrity validation. Attestable AMIs are based on the systemd Unified Kernel Image UKI concept which uses systemd-boot to create a single...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: gomplate, dkron-fips, cluster-api-aws-controller-fips, hydra-fips, nri-nginx, argocd-image-updater, chart-testing-fips, cluster-api-gcp-controller-fips, gitlab-operator-fips, grafana-rollout-operator, aws-flb-cloudwatch, docker-credential-acr-env-fips,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: gomplate, dkron-fips, cluster-api-aws-controller-fips, hydra-fips, nri-nginx, argocd-image-updater, chart-testing-fips, cluster-api-gcp-controller-fips, gitlab-operator-fips, grafana-rollout-operator, aws-flb-cloudwatch, docker-credential-acr-env-fips,...

Moderate: Red Hat Security Advisory: Submariner v0.22 security fixes and container updates

Submariner v0.22 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: karma, terraform-provider-sendgrid, nats-top, kubernetes-csi-external-health-monitor, redka, thanos, kubeflow-katib, protoc-gen-go-grpc, nats-server, rclone, boring-registry, syft, k8ssandra-operator, kaf, headlamp, kserve-rest-proxy, newrelic-k8s-metadata-injection,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: karma, terraform-provider-sendgrid, nats-top, kubernetes-csi-external-health-monitor, redka, thanos, kubeflow-katib, protoc-gen-go-grpc, nats-server, rclone, boring-registry, syft, k8ssandra-operator, kaf, headlamp, kserve-rest-proxy, newrelic-k8s-metadata-injection,...

Moderate: Red Hat Security Advisory: Cost Management Metrics Operator Update

Cost Management Metrics Operator version 4.3.0 release. The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift. The operator runs on the latest supported versions of Openshift. This operator obtains OpenShift usage data by querying Prometheus every...

GHSA-66JQ-2C23-2XH5 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, victorialogs-fips, victorialogs...

CVE-2025-65942 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, victorialogs-fips, victorialogs...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service [CVE-2025-64118]

Summary Node.js module tar is used by IBM App Connect Enterprise Certified Container for handling archives files and data. IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.6 Images Security Update

New images are available for Red Hat build of Keycloak 26.4.6 and Red Hat build of Keycloak 26.4.6 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.11 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.11 and Red Hat build of Keycloak 26.2.11 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

Important: Red Hat Security Advisory: RHTAS 1.3.1 - Tech Preview Release Of the Policy Controller Operator

The Tech Preview release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.15, 4.16,...

Moderate: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.2

cert-manager Operator for Red Hat OpenShift 1.15.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

CVE-2025-64761

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user's permissions in the system. Specifically this is an issue when...

CVE-2025-64761 OpenBao Privileged Operator Identity Group Root Escalation

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user's permissions in the system. Specifically this is an issue when...

CVE-2025-64761

OpenBao Open Source Secrets Management (OpenBao) is affected by CVE-2025-64761 prior to version 2.4.4. A privileged operator in the root namespace could abuse the identity group subsystem to add a root policy to a group, escalating permissions. Alternatively, an operator with policy access could ...

EUVD-2025-198991

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user's permissions in the system. Specifically this is an issue when...