GO-2025-3751 vulnerabilities

Vulnerabilities for packages: nri-nagios, oras, nri-redis, kine, php-fpmexporter, velero-plugin-for-csi, wait-for-port, terraform-provider-tls, sonobuoy, http-echo, redis-operator, cloud-sql-proxy, helm-docs, git-sync, terraform-provider-time, litestream, steampipe, podinfo, frp, kaf, cilium-cli,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, nri-redis, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flanne...

GO-2024-2888 vulnerabilities

Vulnerabilities for packages: nri-nagios, oras, nri-redis, php-fpmexporter, velero-plugin-for-csi, cadvisor, wait-for-port, caddy, sonobuoy, http-echo, docker-compose, helm-docs, litestream, gitness, frp, kaf, cilium-cli, cfssl, dgraph, dataplaneapi, mage, yam, crossplane-provider-aws, flyte,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: kine, velero-plugin-for-csi, cadvisor, wal-g, caddy, crossplane-provider-family-azure, terraform-provider-tls, sonobuoy, victoriametrics, zot, docker-compose, argo-events, litestream, gitness, crossplane-provider-family-aws, frp, kaf, cilium-cli,...

CLEANSTART-2026-NG63443 Security fixes in cfssl 1.5.0-r1

Package cfssl version 1.5.0-r1 fixes 81 vulnerabilities: CVE-2020-29652, CVE-2021-31525, CVE-2021-33194, CVE-2021-38561, CVE-2021-43565...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, apache-beam-python-3.12-sdk, nri-postgresql-fips, kubeflow-katib, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave, grafana-beyla, external-secrets-operator,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: longhorn-backing-image-manager, go-md2man, wave, neuvector-scanner, external-secrets-operator, docker-cli-fips, grafana-fips, neuvector-dbgen, databricks-cli-fips, percona-xtradb-cluster-operator, crossplane-function-go-templating, nri-consul,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, apache-beam-python-3.12-sdk, nri-postgresql-fips, kubeflow-katib, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flannel, sbomqs,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nri-nagios, nri-redis, kine, confluent-cp-docker-utils, sonobuoy, http-echo, redis-operator, helm-docs, git-sync, kubescape-operator, terraform-provider-time, litestream, steampipe, gitness, crossplane-provider-family-aws, frp, podinfo, cilium-cli, cfssl,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, nri-redis, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flanne...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: nri-nagios, nri-redis, kine, confluent-cp-docker-utils, sonobuoy, http-echo, redis-operator, helm-docs, git-sync, kubescape-operator, terraform-provider-time, litestream, steampipe, gitness, crossplane-provider-family-aws, frp, podinfo, cilium-cli, cfssl,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flannel, sbomqs,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, gitlab-runner-fips, longhorn-backing-image-manager, go-md2man, rancher-loglevel, teleport-operator-fips, wave, kiam, cfssl, grafana-beyla, external-secrets-operator, consul-k8s-fips, google-osconfig-agent, loki,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, kubeflow-katib, gitlab-runner-fips, longhorn-backing-image-manager, go-md2man, rancher-loglevel, teleport-operator-fips, wave, kiam, cfssl, grafana-beyla, external-secrets-operator, consul-k8s-fips, google-osconfig-agent, loki,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, kubeflow-katib, gitlab-runner-fips, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, wave, kiam, grafana-beyla, external-secrets-operator, consul-k8s-fips, google-osconfig-agent, loki,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, gitlab-runner-fips, longhorn-backing-image-manager, go-md2man, rancher-loglevel, teleport-operator-fips, wave, kiam, cfssl, grafana-beyla, external-secrets-operator, consul-k8s-fips, google-osconfig-agent, loki,...

Fedora: Security Advisory (FEDORA-2023-b1cebc5424)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to resource exhaustion attack due to github.com/Cloudflare/cfssl ( CVE-2023-39533 )

Summary github.com/Cloudflare/cfssl is used by IBM Cloud Pak for Data. CVE-2023-39533. Vulnerability Details CVEID:CVE-2023-39533 DESCRIPTION: libp2p go-libp2p is vulnerable to a denial of service, caused by a flaw during the signature verification. By sending a specially crafted request using...