CVE-2026-11976

MonsterInsights Pro updates 10.2.0 and 10.2.2 were distributed from the official update bucket and contain a malicious file, class-system-check.php, due to a compromised AWS S3 bucket. Three distinct variants were observed on 2026-06-11, all using the same AES-256-GCM key, indicating a single thr...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: s5cmd, lazydocker, kubeflow, vale, local-path-provisioner, regclient, php-fpmexporter, cilium-cli, omnibump, crossplane-provider-azure-sql, azure-workload-identity-webhook, percona-server-mongodb-operator, nri-mysql, crossplane-provider-azure-authorization,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: s5cmd, lazydocker, kubeflow, vale, local-path-provisioner, regclient, php-fpmexporter, cilium-cli, omnibump, crossplane-provider-azure-sql, azure-workload-identity-webhook, percona-server-mongodb-operator, nri-mysql, crossplane-provider-azure-authorization,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: s5cmd, lazydocker, kubeflow, vale, local-path-provisioner, regclient, php-fpmexporter, cilium-cli, omnibump, crossplane-provider-azure-sql, azure-workload-identity-webhook, percona-server-mongodb-operator, nri-mysql, crossplane-provider-azure-authorization,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: s5cmd, lazydocker, kratos, kubeflow, local-path-provisioner, regclient, php-fpmexporter, azure-workload-identity-webhook, nats, oras, portieris, helm-push, pulumi-language-yaml, istio, kafka-proxy, kubernetes-replicator, rootlesskit, bom, metacontroller, dfc, ferretd...

CVE-2025-58187 vulnerabilities

Vulnerabilities for packages: s5cmd, lazydocker, kratos, kubeflow, local-path-provisioner, regclient, php-fpmexporter, azure-workload-identity-webhook, nats, oras, portieris, helm-push, pulumi-language-yaml, istio, kafka-proxy, kubernetes-replicator, rootlesskit, bom, metacontroller, dfc, ferretd...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: rancher-webhook, iptables-wrappers, lazydocker, docker-credential-acr-env, kratos, apisix-ingress-controller, kubeflow, conjur-cli, opensearch-k8s-operator, local-path-provisioner, kafkaexporter, kapp, neuvector-dbgen, stakater-reloader, terraform-provider-time,...