1436 matches found
BentoML's runner server RCE
There was an insecure deserialization in BentoML's runner server prior to version 1.4.8. By setting specific headers and parameters in the POST request, it is possible to execute unauthorized arbitrary code in the context of the user running the server, which will grant initial access and...
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: CVE-2024-45337: golang.org/x/crypto/ssh: Fixed misuse of ServerConfig.PublicKeyCallback leading to authorization bypass bsc1234563. Other fixes: - Updated to version 20250327.01 bsc1239763, bsc1239866 Remove error messages from...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: tempo, thanos, tekton-chains, kyverno-policy-reporter-ui, zarf, flux-source-controller, ko, hydra, flyte, octo-sts, vexctl, sftpgo-plugin-pubsub, minio-operator, filebrowser, amazon-cloudwatch-agent, opentelemetry-operator, traefik, glab, kots, goreleaser,...
CVE-2024-9070 Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
CVE-2024-9070 Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
forgejo-runner-6.2.2-3.1 on GA media (moderate)
forgejo-runner-6.2.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:14881-1 Rating: moderate Cross-References: CVE-2025-22869 CVSS scores: CVE-2025-22869 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 SUSE : 8.2...
GHSA-WPXF-3MM2-76F8 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-G5QP-3JX2-P69R vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-G5QP-3JX2-P69R vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
GHSA-WPXF-3MM2-76F8 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
OPENSUSE-SU-2025:14881-1 forgejo-runner-6.2.2-3.1 on GA media
These are all security issues fixed in the forgejo-runner-6.2.2-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-0475 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2025-0475 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
CVE-2024-8186 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
CVE-2024-8186 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: prometheus-adapter, octo-sts, whereabouts, amazon-k8s-cni, mockgen, metallb, k8ssandra-operator, falcosidekick, opa-envoy, sftpgo, velero-plugin-for-microsoft-azure, confluent-common-docker, k8s-device-plugin, bazelisk, age, kor, sftpgo-plugin-eventsearch, go-md2man,...
GHSA-V84C-53C6-XMMP vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips...
GHSA-F5R5-77WF-XX6H vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips...