CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-exporter, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, cert-manager-cmctl, step-issuer...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-istio-csr, step-issuer-fips, cert-manager-webhook-pdns-fips, cert-exporter, step-issuer, aws-privateca-issuer, cert-manager-cmctl, aws-privateca-issuer-fips, cert-exporter-fips, cert-manager-webhook-pdns...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, consul-k8s, terraform, cert-manager-fips, backup-restore-operator, etcd, vault, kube-conformance, k3s, rke2-runtime-fips, etcd-fips, falco-no-driver, gitlab-rails-ce-fips...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, consul-k8s, terraform, cert-manager-fips, backup-restore-operator, etcd, vault, kube-conformance, k3s, rke2-runtime-fips, etcd-fips, falco-no-driver, gitlab-rails-ce-fips...

CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25

CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25. A patched version of the package is available...

AZL-71557 CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, chisel, istio, direnv, portieris, atlantis, etcd, cadvisor, nova, conjur-cli, kube-metrics-adapter, kustomize, prometheus-adapter, docker-machine-driver-harvester, mesosphere-vsphere-csi, trillian, rancher-telemetry, vexctl,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts, vault-secrets-webhook...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, protoc-gen-go-grpc, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: distribution, aws-signer-notation-plugin, wire-go, dask-gateway, fq, kubernetes-csi-external-health-monitor, chisel, configmap-reload, custom-pod-autoscaler, istio, kapp, direnv, govulncheck, portieris, vault-k8s, src-fingerprint, argo-rollouts, vault-secrets-webhook...