GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: speedtest-go, glow, rootlesskit, argo-rollouts, custom-pod-autoscaler, harbor-registry, bazelisk, kubelet-csr-approver, portieris, terraform-provider-kubernetes, kubebuilder, delve, capslock, sealed-secrets, terraform-docs, wgcf, falcosidekick,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cert-manager, aws-iam-authenticator, harbor-registry-fips, kepler, local-static-provisioner-fips, wire-go, kubernetes-replicator, whereabouts, yunikorn-k8shim, flannel-fips, k3d, vault-secrets-webhook, wireguard-go, vt-cli, cyberark-secrets-provider-for-k8s-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cert-manager, aws-iam-authenticator, harbor-registry-fips, kepler, local-static-provisioner-fips, wire-go, kubernetes-replicator, whereabouts, yunikorn-k8shim, flannel-fips, k3d, vault-secrets-webhook, wireguard-go, vt-cli, cyberark-secrets-provider-for-k8s-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cert-manager, aws-iam-authenticator, harbor-registry-fips, kepler, local-static-provisioner-fips, wire-go, kubernetes-replicator, whereabouts, yunikorn-k8shim, flannel-fips, k3d, vault-secrets-webhook, wireguard-go, vt-cli, cyberark-secrets-provider-for-k8s-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: cert-manager, aws-iam-authenticator, harbor-registry-fips, kepler, local-static-provisioner-fips, wire-go, kubernetes-replicator, whereabouts, yunikorn-k8shim, flannel-fips, k3d, vault-secrets-webhook, wireguard-go, vt-cli, cyberark-secrets-provider-for-k8s-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: cert-manager, aws-iam-authenticator, harbor-registry-fips, kepler, local-static-provisioner-fips, wire-go, kubernetes-replicator, whereabouts, yunikorn-k8shim, flannel-fips, k3d, vault-secrets-webhook, wireguard-go, vt-cli, cyberark-secrets-provider-for-k8s-fips,...

AZL-69200 CVE-2025-58183 affecting package gh for versions less than 2.62.0-10

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...

CVE-2025-54545 On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges...

CVE-2025-54545 On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges...

CVE-2025-54545

CVE-2025-54545 is a local privilege-escalation in Arista DANZ Monitoring Fabric (DMF) and related products. A restricted user could break out of the CLI sandbox to the system shell, gaining elevated privileges. Arista’s Security Advisory 0124 confirms affected products across DMF, Converged Cloud...

CVE-2025-11202

win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists...