CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, actions-runner-controller, stakater-reloader, rancher-fleet, juicefs, pluto, nodetaint, cluster-api-aws-controller, nri-postgresql, nri-kubernetes, kubernetes-csi-external-resizer, kubelet-csr-approver, jitsucom-bulker, tfsec, hugo-extended,...

Ubuntu: Security Advisory (USN-7907-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7906-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BIT-CILIUM-OPERATOR-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

CVE-2025-38678 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure...

EUVD-2025-199886

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

CVE-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

Ubuntu: Security Advisory (USN-7889-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20251128-03

A vulnerability in the Vault access control system and Vault enterprise information archiving platform Enterprise is related to authentication bypass using an alternate path or channel in AWS authentication method. AWS authentication method. Exploitation of the vulnerability could allow an attack...

CVE-2025-22105 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure...

CVE-2025-23130 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure...

Ubuntu: Security Advisory (USN-7861-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-63604

A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the executequery method. The vulnerability stems from the exposure of dangerous Python built-in functions import, getattr, hasattr in...

CVE-2025-63604

A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the executequery method. The vulnerability stems from the exposure of dangerous Python built-in functions import, getattr, hasattr in...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: grafana-alloy, jitsucom-bulker, splunk-otel-collector, amazon-cloudwatch-agent, cluster-api-aws-controller, bento, opentelemetry-collector-contrib, argo-events, sqlexporter...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: grafana-alloy, jitsucom-bulker, splunk-otel-collector, amazon-cloudwatch-agent, cluster-api-aws-controller, bento, opentelemetry-collector-contrib, argo-events, sqlexporter...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: argo-events, dapr-fips, jitsucom-bulker, vault, splunk-otel-collector-fips, amazon-cloudwatch-agent-fips, grafana-alloy, argo-events-fips, cluster-api-aws-controller-fips, opentelemetry-collector-contrib, bento, vault-fips, dapr, telegraf, amazon-cloudwatch-agent,...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: argo-events, dapr-fips, jitsucom-bulker, vault, splunk-otel-collector-fips, amazon-cloudwatch-agent-fips, grafana-alloy, argo-events-fips, cluster-api-aws-controller-fips, opentelemetry-collector-contrib, bento, vault-fips, dapr, telegraf, amazon-cloudwatch-agent,...

CVE-2025-65073

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...

HSEC-2023-0013 git-annex plaintext storage of embedded credentials on encrypted remotes

git-annex plaintext storage of embedded credentials on encrypted remotes git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the Git repository in effectively...