BIT-CERT-MANAGER-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Security Bulletin: A vulnerability in cert-manager affects IBM Robotic Process Automation for Cloud Pak and could result in a denial of service (CVE-2024-12401).

Summary A vulnerability in cert-manager affects IBM Robotic Process Automation for Cloud Pak and could result in a denial of service CVE-2024-12401. Cert-manager is used by IBM Robotic Process Automation for Cloud Pak as part of it's container deployment. This security bulletin identifies the fix...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

AZL-60528 CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-60472 CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in cert-manager

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of cert-manager. Vulnerability Details CVEID:CVE-2024-36537 DESCRIPTION: cert-manager could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an insecure permissions flaw. By obtaining...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, k9s, chartmuseum, zot, flux-helm-controller, flux-source-controller, kots, helm-operator, pluto, rancher-helm, kubescape, cluster-api-helm-controller, cilium-cli, eksctl, k8ssandra-client, chart-testing, helm-docs, tw, zarf, helm-push, trivy, flux...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, k9s, chartmuseum, zot, flux-helm-controller, flux-source-controller, kots, helm-operator, pluto, rancher-helm, kubescape, cluster-api-helm-controller, cilium-cli, eksctl, k8ssandra-client, chart-testing, helm-docs, tw, zarf, helm-push, trivy, flux...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, k9s, chartmuseum, zot, flux-helm-controller, flux-source-controller, kots, helm-operator, pluto, rancher-helm, kubescape, cluster-api-helm-controller, cilium-cli, eksctl, k8ssandra-client, chart-testing, helm-docs, tw, zarf, helm-push, trivy, flux...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, k9s, chartmuseum, zot, flux-helm-controller, flux-source-controller, kots, helm-operator, pluto, rancher-helm, kubescape, cluster-api-helm-controller, cilium-cli, eksctl, k8ssandra-client, chart-testing, helm-docs, tw, zarf, helm-push, trivy, flux...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: kubescape, cluster-api-helm-controller-fips, kots, flux, flux-helm-controller, trivy-fips, cilium-cli, pluto, consul-k8s-fips, chartmuseum-fips, kuma, cert-manager-cmctl-fips, zot, chart-testing, harbor, trivy, flux-helm-controller-fips, harbor-fips, zarf, eksctl,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: kubescape, cluster-api-helm-controller-fips, kots, flux, flux-helm-controller, trivy-fips, cilium-cli, pluto, consul-k8s-fips, chartmuseum-fips, kuma, cert-manager-cmctl-fips, zot, chart-testing, harbor, trivy, flux-helm-controller-fips, harbor-fips, zarf, eksctl,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: kubescape, cluster-api-helm-controller-fips, kots, flux, flux-helm-controller, trivy-fips, cilium-cli, pluto, consul-k8s-fips, chartmuseum-fips, kuma, cert-manager-cmctl-fips, zot, chart-testing, harbor, trivy, flux-helm-controller-fips, harbor-fips, zarf, eksctl,...

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22. A patched version of the package is available...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, vault-k8s, memcached-exporter, supercronic, flux-notification-controller, kapp-controller, rabbitmq-default-user-credential-updater, secrets-store-csi-driver-provider-gcp, yace, vexctl, helm-docs, flux-image-automation-controller, gitleaks,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, vault-k8s, memcached-exporter, supercronic, flux-notification-controller, kapp-controller, rabbitmq-default-user-credential-updater, secrets-store-csi-driver-provider-gcp, yace, vexctl, helm-docs, flux-image-automation-controller, gitleaks,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, terraform-provider-acme, step-issuer, kind, fq, fluent-operator-fips, prometheus-beat-exporter-fips, consul-k8s-fips, speedtest-go, karpenter, yq-fips, ctop, kubernetes-csi-external-snapshotter, grype-fips, tfsec,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, terraform-provider-acme, step-issuer, kind, fq, fluent-operator-fips, prometheus-beat-exporter-fips, consul-k8s-fips, speedtest-go, karpenter, yq-fips, ctop, kubernetes-csi-external-snapshotter, grype-fips, tfsec,...

AZL-59991 CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

AZL-60145 CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...