GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, smarter-device-manager, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, smarter-device-manager, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: gcsfuse, docker-credential-ecr-login, prometheus-alertmanager, cluster-api-provider-vsphere, kube-logging-operator-custom-runner, nodetaint, controller-gen, terraform-provider-azuread, cloud-provider-vsphere, terraform-provider-tls, vault-env, mockgen,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, smarter-device-manager, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, smarter-device-manager, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager, cluster-api-provider-vsphere,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, smarter-device-manager, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, smarter-device-manager, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, smarter-device-manager, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, smarter-device-manager, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: dockerize, ipfs-cluster, kuberlr, gcsfuse, petname, trivy-operator, sealed-secrets, smarter-device-manager, mongodb-kubernetes-operator, kube-vip-cloud-provider, docker-credential-ecr-login, kubernetes-csi-external-attacher, podinfo, prometheus-alertmanager,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras, cilium-certgen,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: karpenter, gcsfuse, nova-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, pushprox-fips, cloud-provider-azure, maru, cluster-api-helm-controller, spark-operator, kyverno-notation-aws-fips, kubevela, rootlesskit-fips, oras,...

AZL-69200 CVE-2025-58183 affecting package gh for versions less than 2.62.0-10

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...

CVE-2025-54545 On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges...

CVE-2025-54545

CVE-2025-54545 is a local privilege-escalation in Arista DANZ Monitoring Fabric (DMF) and related products. A restricted user could break out of the CLI sandbox to the system shell, gaining elevated privileges. Arista’s Security Advisory 0124 confirms affected products across DMF, Converged Cloud...

CVE-2025-54545 On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges...