Azure Linux 3.0 Security Update: helm (CVE-2025-32387)

The version of helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32387 advisory. - Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32387)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32387 advisory. - Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be...

CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2025-32387 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-32387 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23

CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23. A patched version of the package is available...

CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23

CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23. A patched version of the package is available...

BIT-CERT-MANAGER-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Security Bulletin: A vulnerability in cert-manager affects IBM Robotic Process Automation for Cloud Pak and could result in a denial of service (CVE-2024-12401).

Summary A vulnerability in cert-manager affects IBM Robotic Process Automation for Cloud Pak and could result in a denial of service CVE-2024-12401. Cert-manager is used by IBM Robotic Process Automation for Cloud Pak as part of it's container deployment. This security bulletin identifies the fix...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

AZL-60528 CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-60472 CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in cert-manager

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of cert-manager. Vulnerability Details CVEID:CVE-2024-36537 DESCRIPTION: cert-manager could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an insecure permissions flaw. By obtaining...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: pluto, k9s, zarf, trivy, tw, zot, cilium-cli, kubescape, flux-source-controller, helm-operator, kots, flux-helm-controller, cert-manager-cmctl, chart-testing, flux, k8ssandra-client, eksctl, helm-push, chartmuseum, rancher-helm, helm-docs, cluster-api-helm-controller...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: pluto, k9s, zarf, trivy, tw, zot, cilium-cli, kubescape, flux-source-controller, helm-operator, kots, flux-helm-controller, cert-manager-cmctl, chart-testing, flux, k8ssandra-client, eksctl, helm-push, chartmuseum, rancher-helm, helm-docs, cluster-api-helm-controller...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: pluto, k9s, zarf, trivy, tw, zot, cilium-cli, kubescape, flux-source-controller, helm-operator, kots, flux-helm-controller, cert-manager-cmctl, chart-testing, flux, k8ssandra-client, eksctl, helm-push, chartmuseum, rancher-helm, helm-docs, cluster-api-helm-controller...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: pluto, k9s, zarf, trivy, tw, zot, cilium-cli, kubescape, flux-source-controller, helm-operator, kots, flux-helm-controller, cert-manager-cmctl, chart-testing, flux, k8ssandra-client, eksctl, helm-push, chartmuseum, rancher-helm, helm-docs, cluster-api-helm-controller...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: zot, flux-helm-controller, kubescape, helm-push, flux-source-controller, kots, flux, helm-operator, consul-k8s, tw, cluster-api-helm-controller, eksctl, chartmuseum-fips, k9s, flux-helm-controller-fips, pluto, k8ssandra-client, harbor, kuma, cilium-cli,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: zot, flux-helm-controller, kubescape, helm-push, flux-source-controller, kots, flux, helm-operator, consul-k8s, tw, cluster-api-helm-controller, eksctl, chartmuseum-fips, k9s, flux-helm-controller-fips, pluto, k8ssandra-client, harbor, kuma, cilium-cli,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: zot, flux-helm-controller, kubescape, helm-push, flux-source-controller, kots, flux, helm-operator, consul-k8s, tw, cluster-api-helm-controller, eksctl, chartmuseum-fips, k9s, flux-helm-controller-fips, pluto, k8ssandra-client, harbor, kuma, cilium-cli,...