PT-2025-17524 · Minio · Minio Operator

Name of the Vulnerable Software and Affected Versions: MinIO Operator versions prior to 7.1.0 Description: The issue concerns the MinIO Operator STS, a native IAM Authentication for Kubernetes. Without proper scoping, authentication can be replayed to other internal systems that may unintentional...

influencemap.org Cross Site Scripting vulnerability OBB-4047457

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.14.6

The 1.14.6 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.14.6 release of Red Hat OpenShift Pipelines Operator...

AZL-60409 CVE-2024-56406 affecting package perl for versions less than 5.38.2-507

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

DEBIAN-CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

ALPINE-CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

AZL-60384 CVE-2024-56406 affecting package perl for versions less than 5.34.1-490

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the "tr" operator, "Sdotransinvmap" can overflow the destinatio...

UBUNTU-CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

CVE-2024-56406: Heap-based Buffer Overflow

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: helm-operator, cert-manager-cmctl, cluster-api-helm-controller, rancher-helm, helm-docs, tw, pluto, kubescape, k8ssandra-client, flux-helm-controller, k9s, flux-source-controller, chartmuseum, kots, helm-push, zot, chart-testing, eksctl, zarf, cilium-cli, flux, trivy...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: helm-operator, cert-manager-cmctl, cluster-api-helm-controller, rancher-helm, helm-docs, tw, pluto, kubescape, k8ssandra-client, flux-helm-controller, k9s, flux-source-controller, chartmuseum, kots, helm-push, zot, chart-testing, eksctl, zarf, cilium-cli, flux, trivy...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: helm-operator, cert-manager-cmctl, cluster-api-helm-controller, rancher-helm, helm-docs, tw, pluto, kubescape, k8ssandra-client, flux-helm-controller, k9s, flux-source-controller, chartmuseum, kots, helm-push, zot, chart-testing, eksctl, zarf, cilium-cli, flux, trivy...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: helm-operator, cert-manager-cmctl, cluster-api-helm-controller, rancher-helm, helm-docs, tw, pluto, kubescape, k8ssandra-client, flux-helm-controller, k9s, flux-source-controller, chartmuseum, kots, helm-push, zot, chart-testing, eksctl, zarf, cilium-cli, flux, trivy...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: helm-operator, harbor-fips, kots, harbor, trivy, chartmuseum-fips, flux-helm-controller, flux, rancher-helm, chart-testing, kubescape, cluster-api-helm-controller, zot, k8ssandra-client, cilium-cli, k9s, flux-helm-controller-fips, cluster-api-helm-controller-fips, tw...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: helm-operator, harbor-fips, kots, harbor, trivy, chartmuseum-fips, flux-helm-controller, flux, rancher-helm, chart-testing, kubescape, cluster-api-helm-controller, zot, k8ssandra-client, cilium-cli, k9s, flux-helm-controller-fips, cluster-api-helm-controller-fips, tw...

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

SUSE-SU-2025:20184-1 Security update for elemental-operator

This update for elemental-operator fixes the following issues: - Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the...

Security update for elemental-operator

This update for elemental-operator fixes the following issues: Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the K...