EUVD-2022-4654

Malicious code in bioql PyPI...

EUVD-2023-0865

Malicious code in bioql PyPI...

EUVD-2025-0141

Malicious code in bioql PyPI...

EUVD-2024-1710

Malicious code in bioql PyPI...

EUVD-2022-1702

Malicious code in bioql PyPI...

EUVD-2021-9152

Malicious code in bioql PyPI...

EUVD-2022-1270

Malicious code in bioql PyPI...

EUVD-2023-1459

Malicious code in bioql PyPI...

EUVD-2024-2517

Malicious code in bioql PyPI...

EUVD-2023-0613

Malicious code in bioql PyPI...

EUVD-2025-4205

Malicious code in bioql PyPI...

EUVD-2023-2497

Malicious code in bioql PyPI...

GHSA-8PXW-9C75-6W56 NeuVector admin account has insecure default password

Impact A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in admin account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the defau...

SUSE CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, node-feature-discovery-fips, request-1279-14, ip-masq-agent, kbld, gofumpt, newrelic-infra-operator, kuma, neuvector-scanner-fips, gcp-compute-persistent-disk-csi-driver-fips, dex-fips, kubescape, amazon-cloudwatch-agent,...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2024-45338 DESCRIPTION: An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-22868 DESCRIPTION: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. CWE:CWE-1286: Improper...

PT-2025-26762

Name of the Vulnerable Software and Affected Versions: NVIDIA AIStore versions prior to 2.3.0 Description: The issue is related to a vulnerability in the AIS Operator of NVIDIA AIStore, where a user can gain elevated access to the k8s cluster by using the ServiceAccount attached to the ClusterRol...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2024-55549 DESCRIPTION: xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CWE:CWE-416: Use...

CVE-2025-24784

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. The policy group feature, added to by the 1.17.0 release. By being namespaced, the AdmissionPolicyGroup has a well constrained impact on cluster resources. Hence, it’s considere...