GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, k6-operator-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, temporal, seaweedfs-operator-fips...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

EUVD-2020-0023

Ansible does not collect garbage after playbook run...

PT-2025-45707

A flaw was found in Ansible Base when using the aws ssm connection plugin as its garbage collector is not happening after the playbook run is completed. Files would remain in the bucket exposing the data. This issue directly affects data confidentiality...

GO-2025-4028 go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents in github.com/in-toto/go-witness

go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents in github.com/in-toto/go-witness...

PT-2025-45867

OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method in github.com/openbao/openbao-plugins. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

AWS Bedrock Prompt Caching Support in Spring AI

In our previous blog post about Anthropic prompt caching, we explored how prompt caching dramatically reduces API costs and latency by reusing previously processed prompt content. We introduced Spring AI's five strategic caching patterns for Anthropic Claude models and showed how they automatical...

PT-2025-45869

HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass in github.com/hashicorp/vault...

PT-2025-45829

go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents in github.com/in-toto/go-witness...

CVE-2025-56558: Unprotected Alternate Channel

The Dyson MQTT server 2022 and possibly later allows publications and subscriptions by a client that has the correct values of AWSACCESSKEYID, AWSSECRETACCESSKEY, AWSSESSIONTOKEN, and device serial number, even if a device such as a Pure Hot+Cool device has been removed and is not visible in the...

Ubuntu: Security Advisory (USN-7829-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass

Vault and Vault Enterprise's "Vault" AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.21.0, 1.20.5,...