CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...

Astra Linux – Vulnerability in Apache2

In the Apache HTTP Server with modproxy loaded, SSRF allows an attacker to send outbound proxy requests to a URL controlled by the attacker. This requires a unusual configuration, where modheaders is used to modify the Content-Type header of the request or response, with a value provided in the...

Astra Linux – Vulnerability in curl

Successfully using libcurl to perform a transfer over a specific HTTP proxy proxyA with Digest authentication. Then, changing the proxy host to another one proxyB for a second transfer, while reusing the same handle, causes libcurl to incorrectly pass the Proxy-Authorization: header field meant f...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix use-after-free in AARP proxy probe The AARP proxy-probe routine aarpproxyprobenetwork sends a probe, releases the aarplock, sleeps, and then re-acquires the lock. During this period, a timer thread...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fixed NPD in arp,neighreduce, when using nexthop objects. When the “proxy” option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf...

Astra Linux – Vulnerability in OpenSSH

Using SSH in OpenSSH before version 10.1 allows for the use of the '\0' character in an SSH URI. This could potentially lead to code execution when a ProxyCommand is used...

Astra Linux – Vulnerability in curl

curl will incorrectly reuse an existing HTTP proxy connection when making a CONNECT request to a server, even if the new request uses different credentials for the HTTP proxy. The correct behavior is to create or use a separate connection...

Astra Linux – Vulnerability in OpenSSL

Issue summary: An application that uses the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the ‘noproxy’ environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can cause a crash,...

Astra Linux – Vulnerability in Apache2

In certain proxy configurations, a denial-of-service attack against Apache HTTP Server versions 2.4.26 through 2.4.63 can occur when untrusted clients trigger an assertion in modproxyhttp2. The configurations affected include reverse proxies configured for HTTP/2 backends, where ProxyPreserveHost...

SUSE SLES15 Security Update : squid (SUSE-SU-2025:3902-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:3902-1 advisory. - CVE-2025-62168: Fixed proxy auth data visible to scripts bsc1252281. Tenable has extracted the preceding description block directly from t...