Medium: python3.12-pip

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

SUSE-SU-2025:20199-1 Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: - CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN bsc1237058. - CVE-2025-24032: Fixed authentication bypass with default value for certpolicy none bsc1237062...

CVE-2022-3114

creationtimestamp| type| source ---|---|--- 2025-04-22 14:03:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12840 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-37860

creationtimestamp| type| source ---|---|--- 2025-04-18 07:59:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12407 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

Security update for cosign

This update for cosign fixes the following issues: CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...

AZL-60528 CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-60472 CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

CVE-2025-23133

creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:37+00:00| seen| https://t.me/cvedetector/23115 2025-05-04 13:18:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14801 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-23132

creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:36+00:00| seen| https://t.me/cvedetector/23114 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-22022

creationtimestamp| type| source ---|---|--- 2025-04-16 13:31:28+00:00| seen| https://t.me/cvedetector/23075 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-01-11 18:01:52+00:00| seen|...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in cert-manager

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of cert-manager. Vulnerability Details CVEID:CVE-2024-36537 DESCRIPTION: cert-manager could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an insecure permissions flaw. By obtaining...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: k9s, helm-push, zarf, kubescape, cert-manager-cmctl, trivy, flux-helm-controller, chart-testing, zot, cluster-api-helm-controller, rancher-helm, eksctl, helm-operator, cilium-cli, flux, k8ssandra-client, kots, tw, helm-docs, pluto, flux-source-controller, chartmuseum...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: k9s, helm-push, zarf, kubescape, cert-manager-cmctl, trivy, flux-helm-controller, chart-testing, zot, cluster-api-helm-controller, rancher-helm, eksctl, helm-operator, cilium-cli, flux, k8ssandra-client, kots, tw, helm-docs, pluto, flux-source-controller, chartmuseum...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: k9s, helm-push, zarf, kubescape, cert-manager-cmctl, trivy, flux-helm-controller, chart-testing, zot, cluster-api-helm-controller, rancher-helm, eksctl, helm-operator, cilium-cli, flux, k8ssandra-client, kots, tw, helm-docs, pluto, flux-source-controller, chartmuseum...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: k9s, helm-push, zarf, kubescape, cert-manager-cmctl, trivy, flux-helm-controller, chart-testing, zot, cluster-api-helm-controller, rancher-helm, eksctl, helm-operator, cilium-cli, flux, k8ssandra-client, kots, tw, helm-docs, pluto, flux-source-controller, chartmuseum...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: kubescape, helm-docs, flux-helm-controller, trivy-fips, flux-helm-controller-fips, zot, cluster-api-helm-controller-fips, pluto, cert-manager-cmctl, eksctl, helm-operator, cluster-api-helm-controller, chartmuseum-fips, kuma, helm-operator-fips, chart-testing-fips,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: kubescape, helm-docs, flux-helm-controller, trivy-fips, flux-helm-controller-fips, zot, cluster-api-helm-controller-fips, pluto, cert-manager-cmctl, eksctl, helm-operator, cluster-api-helm-controller, chartmuseum-fips, kuma, helm-operator-fips, chart-testing-fips,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: kubescape, helm-docs, flux-helm-controller, trivy-fips, flux-helm-controller-fips, zot, cluster-api-helm-controller-fips, pluto, cert-manager-cmctl, eksctl, helm-operator, cluster-api-helm-controller, chartmuseum-fips, kuma, helm-operator-fips, chart-testing-fips,...

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22. A patched version of the package is available...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: azure-service-operator, aws-flb-firehose, kyverno-policy-reporter, shfmt, kubescape, trivy, kube-logging-operator, ko, kube-fluentd-operator, docker-cli-buildx, aws-flb-cloudwatch, dagdotdev, cfssl, falcoctl, incert, cluster-proportional-autoscaler, kubevela,...