CVE-2025-66623

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...

CVE-2025-66623 Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...

CVE-2025-66623

Strimzi (Kafka on Kubernetes/OpenShift) has a vulnerability in versions 0.47.0–0.49.0 where an incorrect Kubernetes Role allows GET access to all Secrets in the target namespace for Kafka Connect and MirrorMaker 2 operands. The issue is fixed in Strimzi 0.49.1. Impact is restricted to unauthorize...

CVE-2025-66623 Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...

CVE-2025-66623 Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...

Malicious code in json-map-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd2d0607d185e9c26b9f948e2335066b6e537f3f192794f59fdf55548300006 The package json-map-source was found to contain malicious code. Source: ghsa-malware 3c10e01cd8946f23f63e8eb210a0de73503e9815cf616aee78f18c96c4fe2ef...

MAL-2025-192321 Malicious code in json-map-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd2d0607d185e9c26b9f948e2335066b6e537f3f192794f59fdf55548300006 The package json-map-source was found to contain malicious code. Source: ghsa-malware 3c10e01cd8946f23f63e8eb210a0de73503e9815cf616aee78f18c96c4fe2ef...

MAL-2025-192318 Malicious code in chai-as-deployed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebc44576073489ddc650d352e43bee3aa036bcdc2914887eb9c36be2780e09b The package chai-as-deployed was found to contain malicious code. Source: ghsa-malware 117c632d121fc31a4f589c4d76730535c6d5b576ae6e3addab756be448c13b...

Malicious code in chai-as-deployed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebc44576073489ddc650d352e43bee3aa036bcdc2914887eb9c36be2780e09b The package chai-as-deployed was found to contain malicious code. Source: ghsa-malware 117c632d121fc31a4f589c4d76730535c6d5b576ae6e3addab756be448c13b...

Malicious code in chai-promised-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a501d6eba591eb49cf120c8aee8c4e0600aacf2263984d3ae14e0d1b53daa92 The package chai-promised-chain was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192319 Malicious code in chai-promised-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a501d6eba591eb49cf120c8aee8c4e0600aacf2263984d3ae14e0d1b53daa92 The package chai-promised-chain was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192320 Malicious code in dotnetenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad45bf9bd262cf43bb28421d876fa019b6f14d3699854454ae1677b0383a90a2 The package dotnetenv was found to contain malicious code. Source: ghsa-malware 1de4b94766b2d429c31b5469528ed35738f14af710e091dbd47b838649173953 Any...

Malicious code in tailwindcss-setfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f910baae4eb0176c7c1c4b6bde6db28967b1f8674784e8953fe7abb47d7730a4 The package tailwindcss-setfont was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192317 Malicious code in tailwindcss-setfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f910baae4eb0176c7c1c4b6bde6db28967b1f8674784e8953fe7abb47d7730a4 The package tailwindcss-setfont was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192316 Malicious code in tailwindcss-animation-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481964585a35f69204d7414e9baf1d490be4d82239919026f044584bf7a64ddd The package tailwindcss-animation-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in seeds-random (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795bbcfb5b0465693171101c152402cfb2b6c877bc4359dbb68b2844b905bcd9 The package seeds-random was found to contain malicious code. Source: ghsa-malware 47de9449cd7355e6e5c74ef85fbc39aceee380dfb0dbbb1f557dda15431d1ff6 A...

MAL-2025-192315 Malicious code in seeds-random (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795bbcfb5b0465693171101c152402cfb2b6c877bc4359dbb68b2844b905bcd9 The package seeds-random was found to contain malicious code. Source: ghsa-malware 47de9449cd7355e6e5c74ef85fbc39aceee380dfb0dbbb1f557dda15431d1ff6 A...

Malicious code in react-svg-fill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995c6ef17232fb1949de6b62053246036337cb070a7b06a466bb122d789c9ca3 The package react-svg-fill was found to contain malicious code. Source: ghsa-malware b09c58dca53550942f8c2595496e45d321f85551e7ce7a94e7059e50448f4709...

MAL-2025-192313 Malicious code in react-svg-fill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995c6ef17232fb1949de6b62053246036337cb070a7b06a466bb122d789c9ca3 The package react-svg-fill was found to contain malicious code. Source: ghsa-malware b09c58dca53550942f8c2595496e45d321f85551e7ce7a94e7059e50448f4709...

Malicious code in react-svg-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0653c3340d723105ee0db3b1e440d764e9c750287b1f50e796b4ce847ddaee46 The package react-svg-bundler was found to contain malicious code. Source: ghsa-malware...