475 matches found
CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22
CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22. A patched version of the package is available...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: aactl, harbor-registry, kubernetes-event-exporter, terraform-provider-grafana, rancher-loglevel, nri-nagios, prometheus, sbom-convert, sbomqs, nri-kafka, terraform-provider-kubernetes, sriov-network-device-plugin, cargobump, malcontent, helm-operator, opencost,...
GHSA-G9PC-8G42-G6VQ vulnerabilities
Vulnerabilities for packages: aactl, harbor-registry, kubernetes-event-exporter, terraform-provider-grafana, rancher-loglevel, nri-nagios, prometheus, sbom-convert, sbomqs, nri-kafka, terraform-provider-kubernetes, sriov-network-device-plugin, cargobump, malcontent, helm-operator, opencost,...
GHSA-G9PC-8G42-G6VQ vulnerabilities
Vulnerabilities for packages: argo-events-fips, caddy-fips, aws-flb-firehose, memcached-exporter-fips, aws-network-policy-agent, secrets-store-csi-driver-provider-gcp-fips, prometheus-redis-exporter, kyverno-notation-aws-fips, kubernetes-csi-driver-hostpath, shfmt, cluster-autoscaler-fips,...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: argo-events-fips, caddy-fips, aws-flb-firehose, memcached-exporter-fips, aws-network-policy-agent, secrets-store-csi-driver-provider-gcp-fips, prometheus-redis-exporter, kyverno-notation-aws-fips, kubernetes-csi-driver-hostpath, shfmt, cluster-autoscaler-fips,...
AZL-59991 CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4
Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...
AZL-60145 CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23
Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...
AZL-59979 CVE-2025-32387 affecting package cert-manager for versions less than 1.12.15-4
Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3...
Critical: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.14.2
cert-manager Operator for Red Hat OpenShift 1.14.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
CVE-2025-30204 affecting package cert-manager for versions less than 1.11.2-21
CVE-2025-30204 affecting package cert-manager for versions less than 1.11.2-21. A patched version of the package is available...
CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3
CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3. A patched version of the package is available...
CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd (CVE-2025-30204)
The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30204 advisory. - golang-jwt is a Go...
CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns (CVE-2024-51744)
The version of application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-51744 advisory. - golang-jwt is a Go implementation...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: aactl, sigstore-scaffolding, pulumi, kubeflow-katib, harbor-registry, falcoctl, k3s, bank-vaults, eksctl, prometheus, kine, octo-sts, opentofu, jitsucom-bulker, crossplane-provider-azure-sql, zarf, temporal-server, step-ca, openbao, crossplane-provider-azure-storage,...
AZL-59233 CVE-2025-30204 affecting package cert-manager for versions less than 1.11.2-21
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...
AZL-59165 CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: docker-compose, kubevela, nerdctl, ctop, k3s, opa, docker-cli-buildx, eksctl, opa-envoy, cluster-api-helm-controller, chartmuseum, k8ssandra-client, syft, xeol, helm-push, k8sgpt, cilium-cli, zarf, flux-helm-controller, flux-source-controller, kaniko, rancher-fleet,...
Azure Linux 3.0 Security Update: cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb (CVE-2025-27144)
The version of cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27144 advisory. - Go JOSE provides an...
Azure Linux 3.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)
The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory. - An attacker can pass a malicious malforme...