GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, chisel, kubernetes-dashboard-web,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

EUVD-2023-31309

Malicious code in bioql PyPI...

MAL-2025-9718 Malicious code in @zalastax/nolb-_acr (npm)

The package @zalastax/nolb-acr was found to contain malicious code...

[SECURITY] Fedora 42 Update: gdcm-3.0.24-8.fc42

Grassroots DiCoM GDCM is a C++ library for DICOM medical files. It supports ACR-NEMA version 1 and 2 huffman compression is not supported, RAW, JPEG, JPEG 2000, JPEG-LS, RLE and deflated transfer syntax. It comes with a super fast scanner implementation to quickly scan hundreds of DICOM files. It...

CVE-2025-27403

Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate to a private Azu...

CVE-2025-27403

The CVE describes a vulnerability in Ratify where Azure authentication providers could exchange an Entra ID token for an ACR refresh token without verifying that the target registry is an Azure Container Registry. This could allow EID tokens with ACR access to be exposed if a workload references ...