6059 matches found
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via the DNS cache. An attacker can cause the controller to panic and become unavailable by inserting a specially crafted DNS response into the cache, either by intercepting and modifying DNS traffic or by controlli...
cert-manager-controller DoS via Specially Crafted DNS Response
Impact The cert-manager-controller performs DNS lookups during ACME DNS-01 processing for zone discovery and propagation self-checks. By default, these lookups use standard unencrypted DNS. An attacker who can intercept and modify DNS traffic from the cert-manager-controller pod can insert a...
GHSA-GX3X-VQ4P-MHHV cert-manager-controller DoS via Specially Crafted DNS Response
Impact The cert-manager-controller performs DNS lookups during ACME DNS-01 processing for zone discovery and propagation self-checks. By default, these lookups use standard unencrypted DNS. An attacker who can intercept and modify DNS traffic from the cert-manager-controller pod can insert a...
SUSE-SU-2026:20218-1 Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver PMD allows an attacker on a VM in the system to leak information and cause a denial of service on the network interface bsc1254161. Other issues fixed...
PT-2026-6308
Name of the Vulnerable Software and Affected Versions cert-manager versions 1.18.0 through 1.18.4 cert-manager versions 1.19.0 through 1.19.2 Description cert-manager simplifies the process of obtaining, renewing, and using certificates in Kubernetes clusters. The cert-manager-controller performs...
PT-2026-6430
Impact The cert-manager-controller performs DNS lookups during ACME DNS-01 processing for zone discovery and propagation self-checks. By default, these lookups use standard unencrypted DNS. An attacker who can intercept and modify DNS traffic from the cert-manager-controller pod can insert a...
CVE-2025-61728 vulnerabilities
Vulnerabilities for packages: headlamp-fips, croc, rancher-helm, kube-conformance, traefik, kube-arangodb-fips, cert-manager-fips, calico, flux-kustomize-controller, timoni, flux-notification-controller, cloudbeat, cloudbeat-fips, tigera-operator, grafana-fips, syncthing-fips, minio, mc,...
CVE-2025-61728 vulnerabilities
Vulnerabilities for packages: rancher-helm, terraform-provider-pagerduty, cert-manager-cmctl, timoni, croc, kine, k8sgateway, cilium-cli, mc, opentofu, headlamp, steampipe, aws-flb-cloudwatch, gitness, cosign, helm, terraform, hubble, opensearch-k8s-operator, flux-image-automation-controller, src...
GHSA-G9Q4-QJX4-2V7Q vulnerabilities
Vulnerabilities for packages: rancher-helm, terraform-provider-pagerduty, cert-manager-cmctl, timoni, croc, kine, k8sgateway, cilium-cli, mc, opentofu, headlamp, steampipe, aws-flb-cloudwatch, gitness, cosign, helm, terraform, hubble, opensearch-k8s-operator, flux-image-automation-controller, src...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...
CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar Farms
CERT Polska, the Polish computer emergency response team, revealed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private company from the manufacturing sector, and a large combined heat and power plant CHP supplying heat to almost half a million customers in...
CLEANSTART-2026-YC48827 Within HostnameError
Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-HV28992 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3
Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3. See references for individual vulnerability details...
CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input
Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...