GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: distribution, mongo-tools, nodetaint, go-md2man, regclient, harbor-registry, kaf, skaffold, sriov-network-device-plugin, rancher-machine, wazero, rancher-system-agent, nats, kafka-proxy, nsc, aws-signer-notation-plugin, trillian, grpcurl, helm-docs, cargobump,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.16.0

cert-manager Operator for Red Hat OpenShift 1.16.0 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

EUVD-2024-3471

Malicious code in bioql PyPI...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, tkn, flux, eksctl, opentofu, terraform-mcp-server, spark-operator, cg, tflint, mockgen, containerd, guac, ini-file, aactl, src, nri-consul, kapp, docker-cli-buildx, prometheus, clickhouse-operator, kubernetes-dashboard, kuberlr, tekton-chain...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, tkn, flux, eksctl, opentofu, terraform-mcp-server, spark-operator, cg, tflint, mockgen, containerd, guac, ini-file, aactl, src, nri-consul, kapp, docker-cli-buildx, prometheus, clickhouse-operator, kubernetes-dashboard, kuberlr, tekton-chain...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: seaweedfs, rclone, skaffold, rancher-system-agent, aws-signer-notation-plugin, pombump, helm-docs, cargobump, gosu, podman, sftpgo-plugin-eventstore, pguser, spiffe-helper, steampipe, kaniko, fluxcd-kustomize-mutating-webhook, configmap-reload, k9s,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: k8ssandra-client-fips, flux, newrelic-fluent-bit-output, neuvector-dbgen-fips, verticadb-operator, src, gh, grpcurl, cargobump, step-issuer, cluster-api-gcp-controller, azurefile-csi-fips, karpenter-fips, op-geth, aws-node-termination-handler-fips,...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32386)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32386 advisory. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it...

Azure Linux 3.0 Security Update: helm (CVE-2025-32386)

The version of helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32386 advisory. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be...