GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: dagger, elastic-agent, traefik, flux-notification-controller-fips, glab, nerdctl, coder-fips, loki, kots, prometheus-podman-exporter-fips, knative-kafka-broker-fips, kubevela-fips, tekton-pipelines-fips, osv-scanner, kargo, kyverno-fips, fulcio,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildkitd, buildah, docker-machine-driver-harvester, cert-manager, flux, argo-events, knative-serving, chezmoi, argocd-image-updater, age, grype, rootlesskit, gitlab-kas, loki, terraform-provider-tls, flux-source-controller, trivy-operator, falcoctl, opentofu, minio,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: nri-mssql, rancher-loglevel, elastic-agent, flux-notification-controller-fips, kube-logging-operator, cert-exporter-fips, glab, nerdctl, multus-cni, thanos, spark-operator-fips, velero-fips, aws-sigv4-proxy-fips, ctop, loki, sonobuoy-fips, kafka-proxy-fips, kots,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: nri-mssql, cloud-provider-gcp-cloud-controller-manager-fips, traefik, elastic-agent, glab, nerdctl, velero-fips, loki, kafka-proxy-fips, kots, hugo, rancher-fleet, prometheus-podman-exporter-fips, ferretdb, prometheus-node-exporter, prometheus-alertmanager-fips,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: nri-mssql, cloud-provider-gcp-cloud-controller-manager-fips, traefik, elastic-agent, cert-exporter-fips, glab, nerdctl, thanos, velero-fips, loki, kafka-proxy-fips, kots, hugo, rancher-fleet, prometheus-podman-exporter-fips, ferretdb, prometheus-node-exporter,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: nri-mssql, cloud-provider-gcp-cloud-controller-manager-fips, traefik, elastic-agent, cert-exporter-fips, glab, nerdctl, thanos, velero-fips, loki, kafka-proxy-fips, kots, hugo, rancher-fleet, prometheus-podman-exporter-fips, ferretdb, prometheus-node-exporter,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: nri-mssql, cloud-provider-gcp-cloud-controller-manager-fips, traefik, elastic-agent, glab, nerdctl, velero-fips, loki, kafka-proxy-fips, kots, hugo, rancher-fleet, prometheus-podman-exporter-fips, ferretdb, prometheus-node-exporter, prometheus-alertmanager-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, k3d, volume-modifier-for-k8s-fips, prometheus-blackbox-exporter, metrics-server-fips, prometheus-stackdriver-exporter, smarter-device-manager-fips, kubeflow-fips, kubevela, conftest-fips, src, kiam, aactl, prometheus-adapter-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: buildkitd, k3d, kubescape, spark-operator, up, src, scorecard, prometheus-blackbox-exporter, aactl, dgraph, kubeflow, kubevela, terraform-provider-sendgrid, slsa-verifier, cortex...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, buildkitd, rqlite, kubevela, src, grype, spark-operator, nginx-stable, ip-masq-agent, flux-source-controller, certificate-transparency, grpcurl, minio, gitness, kubeflow-katib, oauth2-proxy, kots, mc, flux-notification-controller, wireguard-go,...

Information Disclosure

github.com/hashicorp/terraform is vulnerable to information disclosure. The vulnerability exists when Terraform is configured to use AzureRM blob storage, and is authenticated using a SAS that does not require HTTPS, and if the AzureRM blob storage container allows HTTP connections. The token and...