1272 matches found
CVE-2025-12103
A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...
CVE-2025-12103
A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...
Red Hat OpenShift AI 安全漏洞
Red Hat OpenShift AI is an AI-oriented lifecycle management platform from Red Hat USA. A security vulnerability exists in Red Hat OpenShift AI that stems from a TrustyAI component that grants all service accounts and users on the cluster permission to obtain, list, and monitor any pod in any...
GHSA-C2HV-4PFJ-MM2R Argo Workflow may expose artifact repository credentials
Summary An attacker who has permissions to read logs from pods in a namespace with Argo Workflow can read workflow-controller logs and get credentials to the artifact repository. Details An attacker, by reading the logs of the workflow controller pod, can access the artifact repository, and steal...
Argo Workflow may expose artifact repository credentials
Summary An attacker who has permissions to read logs from pods in a namespace with Argo Workflow can read workflow-controller logs and get credentials to the artifact repository. Details An attacker, by reading the logs of the workflow controller pod, can access the artifact repository, and steal...
Insufficiently Protected Credentials
Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials due to workflow-controller logging configuration with credentials in plaintext. An attacker can access sensitive credentials by reading pod logs if they have permissions to view logs in the affected...
PT-2025-50230
Name of the Vulnerable Software and Affected Versions Argo Workflows versions 3.6.13 and below Argo Workflows versions 3.7.0 through 3.7.4 Description Argo Workflows, a container-native workflow engine for Kubernetes, has an issue with unsafe untar code that improperly handles symbolic links with...
[SECURITY] Fedora 42 Update: oci-seccomp-bpf-hook-1.2.10-9.fc42
OCI Hook to generate seccomp json files based on EBF syscalls used by contain er oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...
EUVD-2021-2095
Malware in sbrugna...
EUVD-2016-4732
Malware in sbrugna...
EUVD-2020-23252
Malware in sbrugna...
EUVD-2019-2229
Malware in sbrugna...
EUVD-2020-23250
Malware in sbrugna...
EUVD-2019-3768
Malware in sbrugna...
EUVD-2019-5976
Malware in sbrugna...
EUVD-2020-20033
Malware in sbrugna...
EUVD-2020-23251
Malware in sbrugna...
EUVD-2019-3766
Malware in sbrugna...