GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kpt, ghaudit, kratos, task, cloud-provider-gcp-cloud-controller-manager, harbor-registry, velero-plugin-for-aws, cadvisor, container-object-storage-interface, kubernetes-csi-external-attacher, metrics-server, crane, protoc-gen-go, secrets-store-csi-driver, wave,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

cAdvisor Unauthenticated Access

cAdvisor short for container Advisor is an open-source tool developed by Google that provides real-time monitoring and performance analysis of running containers. By default, cAdvisor does not require authentication to access the application. This allows an attacker to access sensitive data. No...

openSUSE Security Advisory (openSUSE-SU-2025:0103-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : cadvisor (openSUSE-SU-2025:0103-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0103-1 advisory. - update to 0.52.1: Make resctrl optional/pluggable - update to 0.52.0: bump containerd related deps: api v1.8.0; errdefs v1.0.0; ttrpc v1.2.6...

OPENSUSE-SU-2025:0103-1 Security update for cadvisor

This update for cadvisor fixes the following issues: - update to 0.52.1: Make resctrl optional/pluggable - update to 0.52.0: bump containerd related deps: api v1.8.0; errdefs v1.0.0; ttrpc v1.2.6 chore: Update Prometheus libraries bump runc to v1.2.4 Add Pressure Stall Information Metrics Switch ...

Security update for cadvisor (moderate)

openSUSE Security Update: Security update for cadvisor Announcement ID: openSUSE-SU-2025:0103-1 Rating: moderate References: 1222192 1239291 Cross-References: CVE-2022-27664 CVE-2025-22868 CVSS scores: CVE-2022-27664 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22868 SUSE: 8.7...

OPENSUSE-SU-2025:14904-1 cadvisor-0.52.1-1.1 on GA media

These are all security issues fixed in the cadvisor-0.52.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kpt, pulumi-language-java, task, supercronic, cni-plugins, cadvisor, aws-flb-firehose, pulumi, timoni, kor, grype, metrics-server, newrelic-infrastructure-agent, nri-haproxy, go-md2man, dynamic-localpv-provisioner, regclient, vt-cli, oras, k8sgpt, shfmt, up, nri-ngin...

Fedora 37 : cadvisor / containerd / golang-github-cloudflare-redoctober / etc (2022-cd92e4cc43)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-cd92e4cc43 advisory. Rebuild to mitigate CVE-2022-21698 rhbz2067400. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...