GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

EUVD-2020-0023

Ansible does not collect garbage after playbook run...

PT-2025-45707

A flaw was found in Ansible Base when using the aws ssm connection plugin as its garbage collector is not happening after the playbook run is completed. Files would remain in the bucket exposing the data. This issue directly affects data confidentiality...

GO-2025-4028 go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents in github.com/in-toto/go-witness

go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents in github.com/in-toto/go-witness...

PT-2025-45867

OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method in github.com/openbao/openbao-plugins. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

AWS Bedrock Prompt Caching Support in Spring AI

In our previous blog post about Anthropic prompt caching, we explored how prompt caching dramatically reduces API costs and latency by reusing previously processed prompt content. We introduced Spring AI's five strategic caching patterns for Anthropic Claude models and showed how they automatical...

PT-2025-45829

go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents in github.com/in-toto/go-witness...

PT-2025-45869

HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass in github.com/hashicorp/vault...

CVE-2025-56558: Unprotected Alternate Channel

The Dyson MQTT server 2022 and possibly later allows publications and subscriptions by a client that has the correct values of AWSACCESSKEYID, AWSSECRETACCESSKEY, AWSSESSIONTOKEN, and device serial number, even if a device such as a Pure Hot+Cool device has been removed and is not visible in the...