CVE-2025-30204 affecting package cert-manager for versions less than 1.11.2-21

CVE-2025-30204 affecting package cert-manager for versions less than 1.11.2-21. A patched version of the package is available...

CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3

CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3. A patched version of the package is available...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd (CVE-2025-30204)

The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30204 advisory. - golang-jwt is a Go...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns (CVE-2024-51744)

The version of application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-51744 advisory. - golang-jwt is a Go implementation...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: gitness, falcoctl, falcosidekick, scorecard, grafana-mimir, docker, temporal-server, oauth2-proxy, goreleaser, chartmuseum, aactl, sftpgo-plugin-kms, trivy, boring-registry, bank-vaults, tekton-chains, argo-rollouts, minio-operator, flux-kustomize-controller, op-geth...

AZL-59165 CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-59233 CVE-2025-30204 affecting package cert-manager for versions less than 1.11.2-21

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, k3s, k8sgpt, kubevela, zot, docker, neuvector-scanner, buildkitd, ctop, helm, fuse-overlayfs-snapshotter, skaffold, spegel, grype, chartmuseum, linkerd2, newrelic-infrastructure-agent, eksctl, helm-operator, trivy, kargo, xeol,...

Azure Linux 3.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)

The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory. - An attacker can pass a malicious malforme...

Azure Linux 3.0 Security Update: cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb (CVE-2025-27144)

The version of cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27144 advisory. - Go JOSE provides an...

CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2

CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2. A patched version of the package is available...

CVE-2025-22869 affecting package cert-manager for versions less than 1.12.15-2

CVE-2025-22869 affecting package cert-manager for versions less than 1.12.15-2. A patched version of the package is available...

CVE-2025-27144 affecting package cert-manager for versions less than 1.12.15-2

CVE-2025-27144 affecting package cert-manager for versions less than 1.12.15-2. A patched version of the package is available...

CBL Mariner 2.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)

The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory. - An attacker can pass a malicious malforme...

CVE-2025-22869 affecting package cert-manager for versions less than 1.11.2-20

CVE-2025-22869 affecting package cert-manager for versions less than 1.11.2-20. A patched version of the package is available...

CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20

CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20. A patched version of the package is available...

CVE-2025-27144 affecting package cert-manager for versions less than 1.11.2-19

CVE-2025-27144 affecting package cert-manager for versions less than 1.11.2-19. A patched version of the package is available...

CBL Mariner 2.0 Security Update: cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb (CVE-2025-27144)

The version of cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27144 advisory. - Go JOSE provides an...

AZL-57407 CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57437 CVE-2025-22869 affecting package cert-manager for versions less than 1.11.2-20

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...