CVE-2025-27144 affecting package cert-manager for versions less than 1.12.15-2

CVE-2025-27144 affecting package cert-manager for versions less than 1.12.15-2. A patched version of the package is available...

CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2

CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2. A patched version of the package is available...

CBL Mariner 2.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)

The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory. - An attacker can pass a malicious malforme...

CVE-2025-22869 affecting package cert-manager for versions less than 1.11.2-20

CVE-2025-22869 affecting package cert-manager for versions less than 1.11.2-20. A patched version of the package is available...

CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20

CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20. A patched version of the package is available...

CVE-2025-27144 affecting package cert-manager for versions less than 1.11.2-19

CVE-2025-27144 affecting package cert-manager for versions less than 1.11.2-19. A patched version of the package is available...

CBL Mariner 2.0 Security Update: cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb (CVE-2025-27144)

The version of cert-manager / containerd / containerd2 / containerized-data-importer / dcos-cli / influxdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27144 advisory. - Go JOSE provides an...

AZL-57437 CVE-2025-22869 affecting package cert-manager for versions less than 1.11.2-20

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57407 CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57312 CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: direnv, overmind, fluent-operator, atlantis, kubernetes-dashboard-api, cadvisor, nginx-prometheus-exporter, sftpgo-plugin-auth, kserve-rest-proxy, gitsign, linkerd2-proxy-init, kube-metrics-adapter, kustomize, prometheus-adapter, trillian, cass-operator, podman,...

AZL-57126 CVE-2025-27144 affecting package cert-manager for versions less than 1.12.15-2

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

AZL-57147 CVE-2025-27144 affecting package cert-manager for versions less than 1.11.2-20

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: step-ca-fips, gatus, flux-kustomize-controller, trivy, fulcio, goreleaser, caddy-fips, sops, argocd-image-updater, rekor, skopeo-fips, tekton-chains, harbor-registry, steampipe, rook, weaviate, argocd-image-updater-fips, flux-kustomize-controller-fips,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: step-ca-fips, gatus, flux-kustomize-controller, trivy, fulcio, goreleaser, caddy-fips, sops, argocd-image-updater, rekor, skopeo-fips, tekton-chains, harbor-registry, steampipe, rook, weaviate, argocd-image-updater-fips, flux-kustomize-controller-fips,...

Azure Linux 3.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...

Azure Linux 3.0 Security Update: cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt (CVE-2023-48795)

The version of cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-48795 advisory. - The SSH transport protocol with certain...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-25620)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25620 advisory. - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources...

Azure Linux 3.0 Security Update: cert-manager / helm / moby-cli / moby-compose / moby-engine (CVE-2023-2253)

The version of cert-manager / helm / moby-cli / moby-compose / moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2253 advisory. - A flaw was found in the /v2/catalog endpoint in...

Azure Linux 3.0 Security Update: cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter (CVE-2023-3978)

The version of cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3978 advisory. - Text nodes not in the HTML namespace ar...