GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: terraform, cloudbeat-fips, k9s-fips, opentofu-fips, xeol, cloudbeat, xeol-fips, trivy, trivy-fips, terraform-fips, trivy-operator, grype-fips, grype-db, opentofu, wolfictl, rancher-fleet, conftest, syft-fips, tfsec, trivy-operator-fips, conftest-fips, chainctl,...

CVE-2025-38522

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Prevent updatelockedrq calls with NULL rq Avoid invoking updatelockedrq when the runqueue rq pointer is NULL in the SCXCALLOP and SCXCALLOPRET macros. Previously, calling updatelockedrqNULL with preemption enabled coul...

CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: helm-push, zot, zarf, helm-operator, kots, pluto, cilium-cli, tw, chartmuseum, linkerd2, helm-mapkubeapis, rancher-fleet, flux, k8ssandra-client, eksctl, cerbos, chart-testing, cert-manager-cmctl, istio, flux-source-controller, headlamp, cluster-api-helm-controller,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: helm-push, zot, zarf, helm-operator, kots, pluto, cilium-cli, chartmuseum, linkerd2, helm-mapkubeapis, rancher-fleet, flux, k8ssandra-client, eksctl, cerbos, chart-testing, cert-manager-cmctl, istio, flux-source-controller, headlamp, cluster-api-helm-controller, triv...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: helm-push, zot, zarf, helm-operator, kots, pluto, cilium-cli, chartmuseum, linkerd2, helm-mapkubeapis, rancher-fleet, flux, k8ssandra-client, eksctl, cerbos, chart-testing, cert-manager-cmctl, istio, flux-source-controller, headlamp, cluster-api-helm-controller, triv...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: helm-push, zot, zarf, helm-operator, kots, pluto, cilium-cli, tw, chartmuseum, linkerd2, helm-mapkubeapis, rancher-fleet, flux, k8ssandra-client, eksctl, cerbos, chart-testing, cert-manager-cmctl, istio, flux-source-controller, headlamp, cluster-api-helm-controller,...

Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator

Thai police arrest SMS Blaster operator in smishing scam and bust crypto laundering gang moving $30M monthly through…...

CVE-2025-8916 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, thingsboard, zipkin, druid...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: celeborn, thingsboard, wildfly, sonarqube, flyway, tez, apicurio-registry, management-api-for-apache-cassandra-5.0, druid, trino, kserve-modelmesh, spark, akhq, apache-nifi, strimzi-kafka-operator...

GHSA-4CX2-FC23-5WG6 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, thingsboard, zipkin, druid...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: celeborn, thingsboard, wildfly, sonarqube, flyway, tez, apicurio-registry, management-api-for-apache-cassandra-5.0, druid, trino, kserve-modelmesh, spark, akhq, apache-nifi, strimzi-kafka-operator...

CVE-2025-8916 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta, solr, druid, opensearch, hadoop-fips, elasticsearch, logstash, zipkin, thingsboard, camunda-zeebe, kserve-modelmesh, pinot-fips, elasticsearch-fips, pinot...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: trino, infinispan, management-api-for-apache-cassandra-4.0, opensearch, elasticsearch, apache-hop, localstack, keycloak, seata, celeborn, spark, apicurio-registry, grpc-java-fips, apache-nifi, tez, camunda-zeebe, akhq, management-api-for-apache-cassandra-4.1,...

GHSA-4CX2-FC23-5WG6 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta, solr, druid, opensearch, hadoop-fips, elasticsearch, logstash, zipkin, thingsboard, camunda-zeebe, kserve-modelmesh, pinot-fips, elasticsearch-fips, pinot...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: trino, infinispan, management-api-for-apache-cassandra-4.0, opensearch, elasticsearch, apache-hop, localstack, keycloak, seata, celeborn, spark, apicurio-registry, grpc-java-fips, apache-nifi, tez, camunda-zeebe, akhq, management-api-for-apache-cassandra-4.1,...

UBUNTU-CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-55196 External Secrets Operator Missing Namespace Restriction in PushSecret and SecretStore List() Calls Allows Unauthorized Secret Access

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...