GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: vendir, terraform-provider-random-fips, kubebuilder, kubernetes-csi-driver-hostpath, protoc-gen-go-grpc, yunikorn-k8shim, terraform-provider-sendgrid, prometheus-alertmanager, policy-controller, influxd, infinispan-operator, juicefs, policy-controller-fips, azure-ipa...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vendir, terraform-provider-random-fips, kubebuilder, kubernetes-csi-driver-hostpath, protoc-gen-go-grpc, yunikorn-k8shim, terraform-provider-sendgrid, prometheus-alertmanager, policy-controller, influxd, infinispan-operator, juicefs, policy-controller-fips, azure-ipa...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: vendir, terraform-provider-random-fips, kubebuilder, kubernetes-csi-driver-hostpath, protoc-gen-go-grpc, yunikorn-k8shim, terraform-provider-sendgrid, prometheus-alertmanager, policy-controller, influxd, infinispan-operator, juicefs, policy-controller-fips, azure-ipa...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: vendir, terraform-provider-random-fips, kubebuilder, kubernetes-csi-driver-hostpath, protoc-gen-go-grpc, yunikorn-k8shim, terraform-provider-sendgrid, prometheus-alertmanager, policy-controller, influxd, infinispan-operator, juicefs, policy-controller-fips, azure-ipa...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: vendir, terraform-provider-random-fips, kubebuilder, kubernetes-csi-driver-hostpath, protoc-gen-go-grpc, yunikorn-k8shim, terraform-provider-sendgrid, prometheus-alertmanager, policy-controller, influxd, infinispan-operator, juicefs, policy-controller-fips, azure-ipa...

GHSA-F5P4-P5Q5-JV3H Contrast has insecure LUKS2 persistent storage partitions may be opened and used

Summary A malicious host may provide a crafted LUKS2 volume to a Contrast pod VM that uses the secure persistent volume feature. The guest will open the volume and write secret data using a volume key known to the attacker. LUKS2 volume metadata is a not authenticated and b supports null...

EUVD-2025-36503

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

CVE-2025-12103

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

CVE-2025-12103

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...