EUVD-2020-25261

Malware in sbrugna...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: slsa-verifier, controller-gen, influx, kpt, nri-mssql, src-fingerprint, nri-mongodb, nri-redis, go-md2man, dockerize, sonobuoy, terraform, aws-load-balancer-controller, goreleaser, k3d, memcached-exporter, kuberay-operator, nri-discovery-kubernetes, nri-kafka, falco,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: slsa-verifier, controller-gen, influx, kpt, nri-mssql, src-fingerprint, nri-mongodb, nri-redis, go-md2man, dockerize, sonobuoy, terraform, aws-load-balancer-controller, goreleaser, k3d, memcached-exporter, kuberay-operator, nri-discovery-kubernetes, nri-kafka, falco,...

GHSA-29QP-CRVH-W22M vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, openbao, crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53, terraform-provider-aws, crossplane-provider-aws-iam, sftpgo-plugin-geoipfilter, crossplane-provider-aws, crossplane-provider-azure-managedidentity,...

GHSA-29QP-CRVH-W22M vulnerabilities

Vulnerabilities for packages: kafka-proxy, crossplane-provider-aws-eks, velero-plugin-for-aws, crossplane-provider-aws-s3, sftpgo-plugin-geoipfilter, terraform, terraform-provider-azurerm, packer-fips, terraform-provider-aws, crossplane-provider-azure-managedidentity, tflint,...

velero-1.15.1-1.1 on GA media (moderate)

velero-1.15.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14613-1 Rating: moderate Cross-References: CVE-2024-45337 CVE-2024-45338 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabiliti...

OPENSUSE-SU-2025:14613-1 velero-1.15.1-1.1 on GA media

These are all security issues fixed in the velero-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11667-1 velero-1.7.1-1.1 on GA media

These are all security issues fixed in the velero-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13225-1 velero-1.11.1-1.1 on GA media

These are all security issues fixed in the velero-1.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11553-1 velero-1.7.0-1.1 on GA media

These are all security issues fixed in the velero-1.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12492-1 velero-1.9.2-1.1 on GA media

These are all security issues fixed in the velero-1.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13384-1 velero-1.12.1-1.1 on GA media

These are all security issues fixed in the velero-1.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11554-1 velero-plugin-for-aws-1.3.0-1.1 on GA media

These are all security issues fixed in the velero-plugin-for-aws-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11494-1 velero-1.6.3-1.2 on GA media

These are all security issues fixed in the velero-1.6.3-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11668-1 velero-plugin-for-microsoft-azure-1.3.1-1.1 on GA media

These are all security issues fixed in the velero-plugin-for-microsoft-azure-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13466-1 velero-1.12.2-1.1 on GA media

These are all security issues fixed in the velero-1.12.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: nuclei, py3-azure-identity, airflow, wal-g, step-ca, fluent-bit-plugin-loki, harbor-registry, boring-registry, cluster-autoscaler, datadog-agent, argo-workflows, sigstore-scaffolding, timestamp-authority, opentelemetry-collector-contrib, goreleaser, k8sgpt,...

SUSE CVE-2020-3996

Velero prior to 1.4.3 and 1.5.2 in some instances doesn't properly manage volume identifiers which may result in information leakage to unauthorized users...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, falcosidekick, docker-compose, influx, kpt, kargo, slsa-verifier, boring-registry, k9s, kots, hubble, sonobuoy, grpc-health-probe, conftest, aws-load-balancer-controller, terraform, goreleaser, k3d, memcached-exporter, zot,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: slsa-verifier, controller-gen, influx, kpt, nri-mssql, src-fingerprint, nri-mongodb, nri-redis, go-md2man, dockerize, sonobuoy, terraform, aws-load-balancer-controller, goreleaser, k3d, memcached-exporter, kuberay-operator, nri-discovery-kubernetes, nri-kafka, falco,...