CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: frp, juicefs, conjur-cli, actions-runner-controller, falco-no-driver, swagger, sonobuoy, azure-service-operator, hubble, percona-server-mongodb-operator, opentofu, ip-masq-agent, k3d, flux-notification-controller, kubernetes-dns-node-cache, bom,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: frp, juicefs, confluent-cp-docker-utils, ip-masq-agent, k3d, flux-notification-controller, mkcert, mage, kubeflow-katib, amazon-cloudwatch-agent-operator, neuvector-sigstore-interface, cluster-autoscaler, nri-couchbase, container-object-storage-interface, scorecard,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: frp, juicefs, conjur-cli, actions-runner-controller, falco-no-driver, swagger, sonobuoy, azure-service-operator, hubble, percona-server-mongodb-operator, opentofu, ip-masq-agent, k3d, flux-notification-controller, kubernetes-dns-node-cache, bom,...

aws-manager (>=0.0.1 <=0.21.2), aws-sdk-manager (>=0.0.0 <=0.0.10) +2 more potentially affected by unknown CVE via aws-sdk-cloudwatch (>=0.11.0 <=0.6.0)

aws-sdk-cloudwatch CARGO version =0.11.0, =0.0.1, =0.0.0, =0.1.3, =1.0.0, =2.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...

EUVD-2022-7662

Malicious code in bioql PyPI...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2904)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300055.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2904 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1029)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1029 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Important: amazon-cloudwatch-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-cloudwatch-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2851)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300054.1-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2851 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: frp, kube-rbac-proxy, terraform-provider-random, ip-masq-agent, k3d, flux-notification-controller, mkcert, mage, kubeflow-katib, amazon-cloudwatch-agent-operator, nri-couchbase, scorecard, task, glab, rabbitmq-messaging-topology-operator, supercronic, render-template...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: frp, kube-rbac-proxy, terraform-provider-random, ip-masq-agent, k3d, flux-notification-controller, mkcert, mage, kubeflow-katib, amazon-cloudwatch-agent-operator, nri-couchbase, scorecard, task, glab, rabbitmq-messaging-topology-operator, supercronic, render-template...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: nri-rabbitmq, frp, litefs, kubernetes-csi-livenessprobe-fips, docker-credential-ecr-login-fips, dynamic-localpv-provisioner, nri-nagios, flux-image-automation-controller-fips, azure-aad-pod-identity-mic, timoni, undock, fluent-operator-fips, flux-helm-controller-fips...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: nri-rabbitmq, frp, litefs, kubernetes-csi-livenessprobe-fips, docker-credential-ecr-login-fips, dynamic-localpv-provisioner, nri-nagios, flux-image-automation-controller-fips, azure-aad-pod-identity-mic, timoni, undock, fluent-operator-fips, flux-helm-controller-fips...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: step-ca, gitea, actions-runner-controller, opentofu, flux-notification-controller, terraform, kubeflow-katib, amazon-cloudwatch-agent-operator, terraform-provider-azurerm, trufflehog, argocd-image-updater, filebrowser, op-geth, git-sync, scorecard, hydra, zarf,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: actions-runner-controller, nuclei, atlantis, falcosidekick, hydra, neuvector, opentelemetry-operator-fips, grafana, eks-distro, flux-image-automation-controller-fips, mongo-tools, azure-aad-pod-identity-mic, terraform-provider-azapi,...