GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: traefik, task, velero-plugin-for-aws, cadvisor, wave, go-md2man, spqr, vt-cli, iptables-wrappers, oras, shfmt, manifest-tool, fulcio, rootlesskit, argo-rollouts, helm-push, cfssl, spark-operator, gke-gcloud-auth-plugin, terraform-provider-time, ipfs-cluster,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, cosign-fips, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

...

Jenkins JDepend Plugin vulnerable to XML external entity attacks

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to configure input files for the "Report JDepend" step to have Jenkins parse a crafted file...