GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: addon-resizer, wire-go, capslock, spqr, terraform-provider-sendgrid, kubernetes-event-exporter, rancher-loglevel, swagger, buildkitd, gatus, nri-redis, kserve-rest-proxy, http-echo, runc, openbao-k8s, aws-flb-firehose, direnv, paranoia, cargobump, undock, nri-f5,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, prometheus-adapter-fips, rabbitmq-cluster-operator-fips, kubernetes-csi-external-provisioner, overmind, sealed-secrets, newrelic-nri-statsd, age-fips, fscrypt, tflint, nri-rabbitmq, promxy, victoriametrics-fips, spqr, newrelic-infra-operator,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, prometheus-adapter-fips, rabbitmq-cluster-operator-fips, kubernetes-csi-external-provisioner, overmind, sealed-secrets, newrelic-nri-statsd, age-fips, fscrypt, tflint, nri-rabbitmq, promxy, victoriametrics-fips, spqr, newrelic-infra-operator,...

AZL-59991 CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

AZL-60145 CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

AZL-59979 CVE-2025-32387 affecting package cert-manager for versions less than 1.12.15-4

Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3...

Critical: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.14.2

cert-manager Operator for Red Hat OpenShift 1.14.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

CVE-2025-21918

creationtimestamp| type| source ---|---|--- 2025-04-07 08:44:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10681 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-21944

creationtimestamp| type| source ---|---|--- 2025-04-02 12:36:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10052 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-21945

creationtimestamp| type| source ---|---|--- 2025-04-02 12:36:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10051 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-21967

creationtimestamp| type| source ---|---|--- 2025-04-02 12:36:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10047 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-21985

creationtimestamp| type| source ---|---|--- 2025-04-01 19:44:32+00:00| seen| https://t.me/cvedetector/21787 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-30204 affecting package cert-manager for versions less than 1.11.2-21

CVE-2025-30204 affecting package cert-manager for versions less than 1.11.2-21. A patched version of the package is available...

CVE-2025-21894

creationtimestamp| type| source ---|---|--- 2025-04-01 15:32:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9926 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3

CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3. A patched version of the package is available...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd (CVE-2025-30204)

The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30204 advisory. - golang-jwt is a Go...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns (CVE-2024-51744)

The version of application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-51744 advisory. - golang-jwt is a Go implementation...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: promxy, chezmoi, thanos, grafana-alloy, k3s, wal-g, fluent-bit-plugin-loki, buildkitd, gitsign, crossplane, amazon-cloudwatch-agent-operator, spire-server, opentelemetry-collector, goreleaser, terraform, eksctl, step, oauth2-proxy, op-geth, traefik, minio-operator,...

AZL-59233 CVE-2025-30204 affecting package cert-manager for versions less than 1.11.2-21

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-59165 CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...