MAL-2025-16450 Malicious code in calico-experience (npm)

The package calico-experience was found to contain malicious code...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-driver-hostpath, rancher-system-agent, emissary, vcluster, mesosphere-vsphere-csi, yunikorn-k8shim, rancher-fleet...

GHSA-HJ2P-8WJ8-PFQ4 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-driver-hostpath, rancher-system-agent, emissary, vcluster, mesosphere-vsphere-csi, yunikorn-k8shim, rancher-fleet...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, yunikorn-k8shim-fips, mesosphere-vsphere-csi, rancher-agent, docker-machine-driver-harvester, blob-csi, blob-csi-fips, calico, longhorn-share-manager-fips, argo-cd, rancher-system-agent, azuredisk-csi-fips, emissary, azurefile-csi, yunikorn-k8shim,...

Photon OS 5.0: Calico PHSA-2024-5.0-0428

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0428. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2022-49697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a...

CVE-2022-49697

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

UBUNTU-CVE-2022-49697

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

CVE-2022-49697 bpf: Fix request_sock leak in sk lookup helpers

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

CVE-2022-49697

CVE-2022-49697 concerns a leak in the Linux kernel caused by a BPF lookup path that could leak a request_sock. The issue occurs when a BPF program performs a socket lookup that takes a refcnt on the socket and, after locating the child request_socket, returns the parent LISTEN socket via sk_to_fu...

CVE-2022-49697 bpf: Fix request_sock leak in sk lookup helpers

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: nats-server, rancher-webhook, fzf, falcoctl, dagger, restic, nri-prometheus, step, k8s-device-plugin, sriov-network-device-plugin, chartmuseum, grafana-operator, kube-vip, scorecard, crossplane-provider-sql, cloudnative-pg, prometheus-pushgateway, nuclei,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nats-server, nri-memcached, aws-flb-kinesis, cass-operator, flux-helm-controller, secrets-store-csi-driver-provider-aws, cri-tools, nri-cassandra, nri-mongodb, aws-load-balancer-controller, kubebuilder, aws-flb-firehose, k8sgpt, dagger, task, newrelic-infra-operator,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: restic, nri-prometheus, k8s-device-plugin, chartmuseum, grafana-operator, kube-vip, scorecard, crossplane-provider-sql, cloudnative-pg, prometheus-pushgateway, nuclei, docker-compose, vault-benchmark, gobuster, conftest, xcaddy, overmind, crossplane-provider-aws,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, grafana-operator, kube-rbac-proxy-fips, argo-workflows-fips, buildkitd, fq, vexctl, docker-credential-ecr-login, azure-aad-pod-identity-mic, prometheus-pushgateway-fips, cert-exporter-fips, prometheus-operator, haproxy-ingress,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, grafana-operator, kube-rbac-proxy-fips, argo-workflows-fips, buildkitd, fq, vexctl, docker-credential-ecr-login, azure-aad-pod-identity-mic, prometheus-pushgateway-fips, cert-exporter-fips, prometheus-operator, haproxy-ingress,...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: nats-server, rancher-webhook, fzf, falcoctl, dagger, restic, nri-prometheus, step, k8s-device-plugin, sriov-network-device-plugin, chartmuseum, grafana-operator, kube-vip, scorecard, crossplane-provider-sql, cloudnative-pg, prometheus-pushgateway, nuclei,...

Moderate Photon OS Security Update - PHSA-2024-5.0-91-0428

Updates of 'calico-bird', 'mariadb' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-5.0-0428

Updates of 'mariadb', 'calico-bird' packages of Photon OS have been released...

Photon OS 4.0: Calico PHSA-2023-4.0-0427

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0427. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...