GHSA-8CCV-3J8R-HX7F vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp...

CVE-2025-37925 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp...

Ubuntu: Security Advisory (USN-7796-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7797-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7793-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7791-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gardener Extension for AWS Provider: Code Injection Vulnerability

Gardener Extension for AWS provider is an =extension controller= for Gardener open source. A code injection vulnerability exists in Gardener Extension for AWS provider, which stems from a vulnerability that could allow a user with administrative privileges to gain control of a seeded cluster via...

Ubuntu: Security Advisory (USN-7755-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2025-8869 via pip (18.0.0)

pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: rancher-security-scan, caddy, nuclei, traefik, rancher-agent, gendesk, dgraph, containerd, cilium-cli, dex, kubernetes-csi-driver-nfs, dapr, cluster-api, ko, rclone, chart-testing, kpt, steampipe, ratify, fzf, gptscript, regclient, grafana-pyroscope, gobump,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: git-lfs, kubernetes-dashboard-fips, octo-sts, cluster-api, kube-vip-cloud-provider, nvidia-nsight-compute-13.2, sftpgo-plugin-pubsub, local-path-provisioner, azuredisk-csi-fips, prometheus-adapter, gitsign, terraform-provider-sendgrid-fips, prometheus-bind-exporter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, kubernetes-dashboard-fips, octo-sts, cluster-api, kube-vip-cloud-provider, nvidia-nsight-compute-13.2, sftpgo-plugin-pubsub, local-path-provisioner, azuredisk-csi-fips, prometheus-adapter, gitsign, terraform-provider-sendgrid-fips, prometheus-bind-exporter,...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

com.amazonaws:aws-codepipeline (>=0.9, <=0.45), com.tinfoilsecurity.plugins:tinfoil-scan (1.4) +5 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.479)

org.jenkins-ci.main:jenkins-core MAVEN version 1.479 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:aws-codepipeline =0.9, =0.45 - com.tinfoilsecurity.plugins:tinfoil-scan 1.4 -...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.5, <=0.5.1), com.piketec.jenkins.plugins:piketec-tpt (>=6.4, <=8.8) +36 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.625.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.5, =6.4, =2.4.3, =2.4.3,...

com.amazonaws:aws-codepipeline (>=0.9, <=0.45), com.tinfoilsecurity.plugins:tinfoil-scan (1.4) +5 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.479)

org.jenkins-ci.main:jenkins-core MAVEN version 1.479 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:aws-codepipeline =0.9, =0.45 - com.tinfoilsecurity.plugins:tinfoil-scan 1.4 -...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.651.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...