GHSA-VXG3-W9RV-RHR2 Contrast leaks workload secrets to logs on INFO level

This is the same vulnerability as https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8. The original vulnerability had been fixed for release v1.8.1, but the fix was not ported to the main branch and thus not present in releases v1.9.0 ff. Below is a brief repetition of...

Linux Distros Unpatched Vulnerability : CVE-2021-25737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creati...

CVE-2025-5417

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

CVE-2025-5417 Rhdh: red hat developer hub user permissions

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

CVE-2025-5417

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

CVE-2025-5417

The CVE-2025-5417 entry describes an insufficient access control vulnerability in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The issue allows a cluster admin/user with standard access, and the Red Hat Developer Hub namespace, to access and modify the image’s content, impacting...

CVE-2025-5417 Rhdh: red hat developer hub user permissions

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

CVE-2025-5417 Rhdh: red hat developer hub user permissions

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

PT-2025-33706 · Red Hat · Red Hat Developer Hub Rhdh/Rhdh-Hub-Rhel9

Name of the Vulnerable Software and Affected Versions: Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image affected versions not specified Description: An insufficient access control issue exists in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. A cluster admin/user with...

Linux Distros Unpatched Vulnerability : CVE-2023-3893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin...

Linux Distros Unpatched Vulnerability : CVE-2021-28705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - issues with partially successful P2M updates on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities...

MAL-2025-36776 Malicious code in the-pod (npm)

The package the-pod was found to contain malicious code...

Malicious code in @zalastax/nolb-pod (npm)

The package @zalastax/nolb-pod was found to contain malicious code...

Malicious code in the-pod (npm)

The package the-pod was found to contain malicious code...

MAL-2025-13210 Malicious code in @zalastax/nolb-pod (npm)

The package @zalastax/nolb-pod was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-22021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for IPv4 packets to restore the original 5-tuple in case of SNAT, ...

[SECURITY] Fedora 41 Update: podman-5.5.2-1.fc41

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Privilege Escalation

k8s.io/kubernetes is vulnerable to Privilege escalation. The vulnerability is due to missing authorization checks during pod creation for dynamic resource claims, allowing a compromised node to create mirror pods that access unauthorized resources...

SUSE CVE-2025-4563

A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicResourceAllocation feature gate is enabled, the controller properly validates resource claim statuses during pod status updates but fails to...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the NodeRestriction admission controller process. An attacker can access unauthorized dynamic resources by creating mirror pods during pod creation when the DynamicResourceAllocation feature gate is enabled...