GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: spiffe-helper, http-echo, kapp, rancher-helm, hivemind, kubernetes-csi-external-health-monitor, secrets-store-csi-driver, capslock, terraform-provider-tls, spicedb-operator, pulumi-language-java, gostatsd, otel-cli, bazelisk, nri-prometheus, cert-manager-cmctl,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: elvish, dagdotdev, spiffe-helper, controller-gen, envconsul, src-fingerprint, petname, http-echo, go-md2man, k3d, kapp, rancher-helm, terraform-provider-azuread, hivemind, mc, docker-credential-ecr-login, kubernetes-csi-external-health-monitor,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: elvish, dagdotdev, spiffe-helper, controller-gen, envconsul, src-fingerprint, petname, http-echo, go-md2man, k3d, kapp, rancher-helm, terraform-provider-azuread, hivemind, mc, docker-credential-ecr-login, kubernetes-csi-external-health-monitor,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: elvish, dagdotdev, spiffe-helper, controller-gen, envconsul, src-fingerprint, petname, http-echo, go-md2man, k3d, kapp, rancher-helm, terraform-provider-azuread, hivemind, mc, docker-credential-ecr-login, kubernetes-csi-external-health-monitor,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: elvish, dagdotdev, spiffe-helper, controller-gen, envconsul, src-fingerprint, petname, http-echo, go-md2man, k3d, kapp, rancher-helm, terraform-provider-azuread, hivemind, mc, docker-credential-ecr-login, kubernetes-csi-external-health-monitor,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: elvish, dagdotdev, spiffe-helper, controller-gen, envconsul, src-fingerprint, petname, http-echo, go-md2man, k3d, kapp, rancher-helm, terraform-provider-azuread, hivemind, mc, docker-credential-ecr-login, kubernetes-csi-external-health-monitor,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: elvish, dagdotdev, spiffe-helper, controller-gen, envconsul, src-fingerprint, petname, http-echo, go-md2man, k3d, kapp, rancher-helm, terraform-provider-azuread, hivemind, mc, docker-credential-ecr-login, kubernetes-csi-external-health-monitor,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: livekit-egress, cloudbeat, xcover, gatekeeper-fips, kubernetes-csi-external-snapshotter-fips, multus-cni, lvm-driver-fips, gke-gcloud-auth-plugin, prometheus-fips, kubernetes-event-exporter-fips, kubernetes-csi-external-health-monitor, wazero, vault-k8s,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: livekit-egress, cloudbeat, xcover, gatekeeper-fips, kubernetes-csi-external-snapshotter-fips, multus-cni, lvm-driver-fips, gke-gcloud-auth-plugin, prometheus-fips, kubernetes-event-exporter-fips, kubernetes-csi-external-health-monitor, wazero, vault-k8s,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: livekit-egress, cloudbeat, xcover, gatekeeper-fips, kubernetes-csi-external-snapshotter-fips, multus-cni, lvm-driver-fips, gke-gcloud-auth-plugin, prometheus-fips, kubernetes-event-exporter-fips, kubernetes-csi-external-health-monitor, wazero, vault-k8s,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: livekit-egress, cloudbeat, xcover, gatekeeper-fips, kubernetes-csi-external-snapshotter-fips, multus-cni, lvm-driver-fips, gke-gcloud-auth-plugin, prometheus-fips, kubernetes-event-exporter-fips, kubernetes-csi-external-health-monitor, wazero, vault-k8s,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: livekit-egress, cloudbeat, xcover, gatekeeper-fips, kubernetes-csi-external-snapshotter-fips, multus-cni, lvm-driver-fips, gke-gcloud-auth-plugin, prometheus-fips, kubernetes-event-exporter-fips, kubernetes-csi-external-health-monitor, vault-k8s,...

GHSA-F5P4-P5Q5-JV3H Contrast has insecure LUKS2 persistent storage partitions may be opened and used

Summary A malicious host may provide a crafted LUKS2 volume to a Contrast pod VM that uses the secure persistent volume feature. The guest will open the volume and write secret data using a volume key known to the attacker. LUKS2 volume metadata is a not authenticated and b supports null...

EUVD-2025-36503

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

CVE-2025-12103

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

CVE-2025-12103

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

CVE-2025-12103

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

Red Hat OpenShift AI security vulnerabilities

Red Hat OpenShift AI is an AI-oriented lifecycle management platform from Red Hat USA. A security vulnerability exists in Red Hat OpenShift AI that stems from a TrustyAI component that grants all service accounts and users on the cluster permission to obtain, list, and monitor any pod in any...

GHSA-C2HV-4PFJ-MM2R Argo Workflow may expose artifact repository credentials

Summary An attacker who has permissions to read logs from pods in a namespace with Argo Workflow can read workflow-controller logs and get credentials to the artifact repository. Details An attacker, by reading the logs of the workflow controller pod, can access the artifact repository, and steal...

Argo Workflow may expose artifact repository credentials

Summary An attacker who has permissions to read logs from pods in a namespace with Argo Workflow can read workflow-controller logs and get credentials to the artifact repository. Details An attacker, by reading the logs of the workflow controller pod, can access the artifact repository, and steal...