CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: rancher-loglevel, cloud-provider-gcp-cloud-controller-manager-fips, cert-exporter-fips, nerdctl, multus-cni, spark-operator-fips, velero-fips, aws-sigv4-proxy-fips, ctop, loki, sonobuoy-fips, wait-for-port, kafka-proxy-fips, ferretdb, prometheus-node-exporter,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: rancher-loglevel, cloud-provider-gcp-cloud-controller-manager-fips, cert-exporter-fips, nerdctl, multus-cni, spark-operator-fips, velero-fips, aws-sigv4-proxy-fips, ctop, loki, sonobuoy-fips, wait-for-port, kafka-proxy-fips, ferretdb, prometheus-node-exporter,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: rancher-loglevel, cloud-provider-gcp-cloud-controller-manager-fips, traefik, kube-logging-operator, cert-exporter-fips, nerdctl, multus-cni, spark-operator-fips, velero-fips, aws-sigv4-proxy-fips, ctop, loki, sonobuoy-fips, wait-for-port, kafka-proxy-fips, ferretdb,...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.16.0

cert-manager Operator for Red Hat OpenShift 1.16.0 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

EUVD-2024-3471

Malicious code in bioql PyPI...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: karpenter, timescaledb-tune, traefik, nri-mysql, plugin-barman-cloud, chart-testing, kube-logging-operator, dive, harbor, swagger, aws-privateca-issuer, ratify, rke2-runtime, containerd, apm-server, cni-plugins, wait-for-port, aws-eks-pod-identity-agent, cert-manager...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: karpenter, timescaledb-tune, traefik, nri-mysql, plugin-barman-cloud, chart-testing, kube-logging-operator, dive, harbor, swagger, aws-privateca-issuer, ratify, rke2-runtime, containerd, apm-server, cni-plugins, wait-for-port, aws-eks-pod-identity-agent, cert-manager...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: buildkitd, gops, rabbitmq-messaging-topology-operator, aws-signer-notation-plugin, dive, cert-manager-istio-csr, rancher-helm, otel-cli, redka, verticadb-operator, sftpgo-plugin-eventstore, harbor-cli, opentofu, fluent-bit-plugin-loki, zot, gitness, kubeflow-katib,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nri-mssql, rancher-loglevel, dagger, kube-logging-operator, glab, nerdctl, multus-cni, thanos, spark-operator-fips, velero-fips, aws-sigv4-proxy-fips, loki, sonobuoy-fips, wait-for-port, kots, newrelic-k8s-metadata-injection-fips, rancher-fleet,...

Azure Linux 3.0 Security Update: helm (CVE-2025-32386)

The version of helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32386 advisory. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be...

Azure Linux 3.0 Security Update: helm (CVE-2025-32387)

The version of helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32387 advisory. - Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32387)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32387 advisory. - Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32386)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32386 advisory. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it...

CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2025-32387 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-32387 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23

CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23. A patched version of the package is available...

CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23

CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23. A patched version of the package is available...

BIT-CERT-MANAGER-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Security Bulletin: A vulnerability in cert-manager affects IBM Robotic Process Automation for Cloud Pak and could result in a denial of service (CVE-2024-12401).

Summary A vulnerability in cert-manager affects IBM Robotic Process Automation for Cloud Pak and could result in a denial of service CVE-2024-12401. Cert-manager is used by IBM Robotic Process Automation for Cloud Pak as part of it's container deployment. This security bulletin identifies the fix...