23 matches found
Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to cert-manager ( CVE-2026-25518 )
Summary Potential vulnerabilities in cert-manager package CVE-2026-25518 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-25518 DESCRIPTION: cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and...
Malicious code in acme-dns-01-freedns (npm)
The package acme-dns-01-freedns was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in acme-dns-01-lightsail (npm)
The package acme-dns-01-lightsail was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in acme-dns-01-dyndns (npm)
The package acme-dns-01-dyndns was found to contain malicious code. --- Credit: OpenSSF source...
PT-2026-65001
cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...
CVE-2026-62290
cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...
CVE-2026-25518 cert-manager-controller DoS via Specially Crafted DNS Response
cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...
GHSA-GX3X-VQ4P-MHHV cert-manager-controller DoS via Specially Crafted DNS Response
Impact The cert-manager-controller performs DNS lookups during ACME DNS-01 processing for zone discovery and propagation self-checks. By default, these lookups use standard unencrypted DNS. An attacker who can intercept and modify DNS traffic from the cert-manager-controller pod can insert a...
PT-2026-6308
Name of the Vulnerable Software and Affected Versions cert-manager versions 1.18.0 through 1.18.4 cert-manager versions 1.19.0 through 1.19.2 Description cert-manager simplifies the process of obtaining, renewing, and using certificates in Kubernetes clusters. The cert-manager-controller performs...
Malicious code in acme-dns-01-dyndns (npm)
The package acme-dns-01-dyndns was found to contain malicious code...
Malicious code in acme-dns-01-freedns (npm)
The package acme-dns-01-freedns was found to contain malicious code...
MAL-2025-14006 Malicious code in acme-dns-01-dyndns (npm)
The package acme-dns-01-dyndns was found to contain malicious code...
MAL-2025-14007 Malicious code in acme-dns-01-freedns (npm)
The package acme-dns-01-freedns was found to contain malicious code...
MAL-2025-14008 Malicious code in acme-dns-01-lightsail (npm)
The package acme-dns-01-lightsail was found to contain malicious code...
Malicious code in acme-dns-01-lightsail (npm)
The package acme-dns-01-lightsail was found to contain malicious code...
GO-2024-2941 ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik
ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik...
GHSA-RVJ4-Q8Q5-8GRF ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability
Impact There is a vulnerability in Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability. References - CVE-2024-35255 Patches - https://github.com/traefik/traefik/releases/tag/v2.11.5 - https://github.com/traefik/traefik/releases/tag/v3.0.3 Workarounds...
Fedora: Security Advisory for golang-github-cpu-goacmedns (FEDORA-2022-ea8f4e232d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
