GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: hydra, kubecolor, flux, kafka-proxy, k3d, prometheus-postgres-exporter, cloud-provider-aws, onepassword-operator, spiffe-helper, rekor, spicedb-operator, azuredisk-csi-fips, kubernetes-csi-external-health-monitor, manifest-tool, docker-cli-buildx,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: hydra, kubecolor, flux, kafka-proxy, k3d, prometheus-postgres-exporter, cloud-provider-aws, onepassword-operator, spiffe-helper, mkcert, rekor, spicedb-operator, azuredisk-csi-fips, kubernetes-csi-external-health-monitor, manifest-tool, docker-cli-buildx,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: hydra, kubecolor, flux, kafka-proxy, k3d, prometheus-postgres-exporter, cloud-provider-aws, onepassword-operator, spiffe-helper, mkcert, rekor, spicedb-operator, azuredisk-csi-fips, kubernetes-csi-external-health-monitor, manifest-tool, docker-cli-buildx,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: hydra, kubecolor, flux, kafka-proxy, k3d, prometheus-postgres-exporter, cloud-provider-aws, onepassword-operator, spiffe-helper, mkcert, rekor, spicedb-operator, azuredisk-csi-fips, kubernetes-csi-external-health-monitor, manifest-tool, docker-cli-buildx,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: hydra, kubecolor, flux, kafka-proxy, k3d, prometheus-postgres-exporter, cloud-provider-aws, onepassword-operator, spiffe-helper, mkcert, rekor, spicedb-operator, azuredisk-csi-fips, kubernetes-csi-external-health-monitor, manifest-tool, docker-cli-buildx,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: hydra, kubecolor, flux, kafka-proxy, k3d, prometheus-postgres-exporter, cloud-provider-aws, onepassword-operator, spiffe-helper, mkcert, rekor, spicedb-operator, azuredisk-csi-fips, kubernetes-csi-external-health-monitor, manifest-tool, docker-cli-buildx,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: hydra, kubecolor, flux, kafka-proxy, k3d, prometheus-postgres-exporter, cloud-provider-aws, onepassword-operator, spiffe-helper, mkcert, rekor, spicedb-operator, azuredisk-csi-fips, kubernetes-csi-external-health-monitor, manifest-tool, docker-cli-buildx,...

EUVD-2020-0023

Ansible does not collect garbage after playbook run...

GO-2025-4028 go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents in github.com/in-toto/go-witness

go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents in github.com/in-toto/go-witness...

AWS Bedrock Prompt Caching Support in Spring AI

In our previous blog post about Anthropic prompt caching, we explored how prompt caching dramatically reduces API costs and latency by reusing previously processed prompt content. We introduced Spring AI's five strategic caching patterns for Anthropic Claude models and showed how they automatical...

Ubuntu: Security Advisory (USN-7829-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass

Vault and Vault Enterprise's "Vault" AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.21.0, 1.20.5,...

CVE-2025-11621

Vault and Vault Enterprise’s “Vault” AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise...

Vault AWS Auth Method Authentication Bypass Through Mishandling of Cache Entries

Summary Vault and Vault Enterprise’s “Vault” AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault...

OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method

Impact This is a cross-account impersonation vulnerability in the auth-aws plugin. The vulnerability allows an IAM role from an untrusted AWS account to authenticate by impersonating a role with the same name in a trusted account, leading to unauthorized access. This impacts all users of the...

Security update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metada

This update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock contains the following fixes: Changes in aws-cli: - Update to 1.33.26...

SUSE-SU-2025:3744-1 Security update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock

This update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock contains the following fixes: Changes in aws-cli: - Update to 1.33.26...

PT-2025-43548

Name of the Vulnerable Software and Affected Versions Vault versions prior to 1.21.0 Vault Enterprise versions prior to 1.21.0, 1.20.5, 1.19.11, and 1.16.27 Description The AWS Auth method in Vault and Vault Enterprise may allow authentication bypass if the bound principal iam role is identical...

PT-2025-43523

Name of the Vulnerable Software and Affected Versions OpenBao AWS Plugin versions prior to 0.1.1 Description The OpenBao AWS Plugin generates AWS access credentials based on IAM policies. Versions of the plugin prior to 0.1.1 are susceptible to cross-account IAM role Impersonation within the AWS...

Ubuntu: Security Advisory (USN-7797-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...