Security update for cosign

This update for cosign fixes the following issues: CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...

AZL-60528 CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-60472 CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

CVE-2025-23133

creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:37+00:00| seen| https://t.me/cvedetector/23115 2025-05-04 13:18:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14801 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-23132

creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:36+00:00| seen| https://t.me/cvedetector/23114 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-22022

creationtimestamp| type| source ---|---|--- 2025-04-16 13:31:28+00:00| seen| https://t.me/cvedetector/23075 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-01-11 18:01:52+00:00| seen|...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in cert-manager

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of cert-manager. Vulnerability Details CVEID:CVE-2024-36537 DESCRIPTION: cert-manager could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an insecure permissions flaw. By obtaining...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: cilium-cli, flux, cert-manager-cmctl, kots, trivy, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, k9s, helm-docs, chartmuseum, zarf, flux-source-controller, tw, kubescape, zot, chart-testing, flux-helm-controller, pluto, helm-push, rancher-helm...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: cilium-cli, flux, cert-manager-cmctl, kots, trivy, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, k9s, helm-docs, chartmuseum, zarf, flux-source-controller, tw, kubescape, zot, chart-testing, flux-helm-controller, pluto, helm-push, rancher-helm...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: cilium-cli, flux, cert-manager-cmctl, kots, trivy, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, k9s, helm-docs, chartmuseum, zarf, flux-source-controller, tw, kubescape, zot, chart-testing, flux-helm-controller, pluto, helm-push, rancher-helm...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: cilium-cli, flux, cert-manager-cmctl, kots, trivy, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, k9s, helm-docs, chartmuseum, zarf, flux-source-controller, tw, kubescape, zot, chart-testing, flux-helm-controller, pluto, helm-push, rancher-helm...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-push, helm-operator, kuma, consul-k8s, trivy-fips, zarf, harbor, kots, flux-helm-controller-fips, trivy, helm-docs, k8ssandra-client-fips, cluster-api-helm-controller-fips, flux-source-controller, chart-testing, flux-helm-controller, k8ssandra-clien...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-push, helm-operator, kuma, consul-k8s, trivy-fips, zarf, harbor, kots, flux-helm-controller-fips, trivy, helm-docs, k8ssandra-client-fips, cluster-api-helm-controller-fips, flux-source-controller, chart-testing, flux-helm-controller, k8ssandra-clien...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-push, helm-operator, kuma, consul-k8s, trivy-fips, zarf, harbor, kots, flux-helm-controller-fips, trivy, helm-docs, k8ssandra-client-fips, cluster-api-helm-controller-fips, flux-source-controller, chart-testing, flux-helm-controller, k8ssandra-clien...

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22. A patched version of the package is available...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: nri-f5, kubernetes-dashboard-metrics-scraper, gobump, flux, hivemind, vertical-pod-autoscaler, filebrowser, aws-signer-notation-plugin, crossplane-provider-azure-storage, ingress-nginx-controller, gatus, hcloud, crossplane-provider-azure-sql, pluto, nri-consul, q,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: nri-f5, kubernetes-dashboard-metrics-scraper, gobump, flux, hivemind, vertical-pod-autoscaler, filebrowser, aws-signer-notation-plugin, crossplane-provider-azure-storage, ingress-nginx-controller, gatus, hcloud, crossplane-provider-azure-sql, pluto, nri-consul, q,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni, lvm-driver, node-feature-discovery, harbor-registry-fips, terraform-provider-random-fips, addon-resizer, supercronic, google-guest-agent-manager, kapp, secrets-store-csi-driver-provider-gcp, elvish, crane-fips, s5cmd, paranoia, prometheus-alertmanager...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni, lvm-driver, node-feature-discovery, harbor-registry-fips, terraform-provider-random-fips, addon-resizer, supercronic, google-guest-agent-manager, kapp, secrets-store-csi-driver-provider-gcp, elvish, crane-fips, s5cmd, paranoia, prometheus-alertmanager...

AZL-59991 CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...