GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, onepassword-operator, fixuid, kind, fq, fluent-operator-fips, kube-conformance, consul-k8s-fips, speedtest-go, karpenter, ctop, kubernetes-csi-external-snapshotter, gops, livekit-egress, tfsec,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, onepassword-operator, fixuid, kind, fq, fluent-operator-fips, kube-conformance, consul-k8s-fips, speedtest-go, karpenter, ctop, kubernetes-csi-external-snapshotter, gops, livekit-egress, tfsec,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, onepassword-operator, fixuid, kind, fq, fluent-operator-fips, kube-conformance, consul-k8s-fips, speedtest-go, karpenter, ctop, kubernetes-csi-external-snapshotter, gops, livekit-egress, tfsec,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, onepassword-operator, fixuid, kind, fq, fluent-operator-fips, kube-conformance, consul-k8s-fips, speedtest-go, karpenter, ctop, kubernetes-csi-external-snapshotter, gops, livekit-egress, tfsec,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, lvm-driver-fips, onepassword-operator, fixuid, kind, fq, fluent-operator-fips, kube-conformance, consul-k8s-fips, speedtest-go, karpenter, ctop, kubernetes-csi-external-snapshotter, gops, livekit-egress, tfsec,...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.16.0

cert-manager Operator for Red Hat OpenShift 1.16.0 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

EUVD-2024-3471

Malicious code in bioql PyPI...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: render-template, aws-otel-collector, rabbitmq-messaging-topology-operator, nri-rabbitmq, wire-go, argo-events, cg, kind, nri-redis, prometheus-operator, karpenter, vault-csi-provider, cis-operator, kuma, nri-mysql, teleport, nri-haproxy, step-kms-plugin,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: render-template, aws-otel-collector, rabbitmq-messaging-topology-operator, nri-rabbitmq, wire-go, argo-events, cg, kind, nri-redis, prometheus-operator, karpenter, vault-csi-provider, cis-operator, kuma, nri-mysql, teleport, nri-haproxy, step-kms-plugin,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: portieris, kube-fluentd-operator, memcached-exporter, supercronic, kapp-controller, terragrunt, secrets-store-csi-driver-provider-gcp, yace, victoriametrics-cluster, nri-discovery-kubernetes, helm-docs, flux-image-automation-controller, falcosidekick,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: buf, secrets-store-csi-driver-provider-azure, step-issuer, fixuid, kind, aws-load-balancer-controller-fips, fq, kube-conformance, consul-k8s-fips, prometheus-operator, karpenter, kubernetes-csi-external-snapshotter, gops, opentelemetry-collector, memcached-exporter,...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32386)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32386 advisory. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32387)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32387 advisory. - Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be...

Azure Linux 3.0 Security Update: helm (CVE-2025-32386)

The version of helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32386 advisory. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be...

Azure Linux 3.0 Security Update: helm (CVE-2025-32387)

The version of helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32387 advisory. - Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a...

CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2025-32387 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-32387 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23

CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23. A patched version of the package is available...

CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23

CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23. A patched version of the package is available...