15969 matches found
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: bom, thanos-operator, docker-cli, flannel, kapp, smokescreen, istio, cert-exporter, dagdotdev, traefik, oauth2-proxy, mongo-tools, falcosidekick, boring-registry, kiali, ini-file, conjur-cli, dynamic-localpv-provisioner, kube-state-metrics, octo-sts, yace, podinfo,...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, timestamp-authority, jitsucom-bulker, terraform-docs,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: rancher-security-scan, terraform-provider-kubernetes-fips, nsc-fips, knative-serving, prometheus-podman-exporter, redka, sops, packer, kube-bench, mountpoint-s3-csi-driver, argo-rollouts, oauth2-proxy-fips, amass, pvc-autoresizer-fips, prometheus-alertmanager, vitess...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: rancher-security-scan, terraform-provider-kubernetes-fips, nsc-fips, knative-serving, prometheus-podman-exporter, redka, sops, packer, kube-bench, mountpoint-s3-csi-driver, argo-rollouts, oauth2-proxy-fips, amass, pvc-autoresizer-fips, prometheus-alertmanager, vitess...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: rancher-security-scan, terraform-provider-kubernetes-fips, nsc-fips, knative-serving, prometheus-podman-exporter, redka, sops, packer, kube-bench, mountpoint-s3-csi-driver, argo-rollouts, oauth2-proxy-fips, amass, pvc-autoresizer-fips, prometheus-alertmanager, vitess...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: rancher-security-scan, terraform-provider-kubernetes-fips, nsc-fips, knative-serving, prometheus-podman-exporter, redka, sops, packer, kube-bench, mountpoint-s3-csi-driver, argo-rollouts, oauth2-proxy-fips, amass, pvc-autoresizer-fips, prometheus-alertmanager, vitess...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: rancher-security-scan, terraform-provider-kubernetes-fips, nsc-fips, knative-serving, prometheus-podman-exporter, redka, sops, packer, kube-bench, mountpoint-s3-csi-driver, argo-rollouts, oauth2-proxy-fips, amass, pvc-autoresizer-fips, prometheus-alertmanager, vitess...
AZL-69200 CVE-2025-58183 affecting package gh for versions less than 2.62.0-10
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...
CVE-2025-54545 On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.
On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges...
CVE-2025-54545
CVE-2025-54545 is a local privilege-escalation in Arista DANZ Monitoring Fabric (DMF) and related products. A restricted user could break out of the CLI sandbox to the system shell, gaining elevated privileges. Arista’s Security Advisory 0124 confirms affected products across DMF, Converged Cloud...
CVE-2025-54545 On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.
On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges...