GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: envconsul, contour, swagger, infinispan-operator, rancher-loglevel, k8sgpt-operator, nerdctl, nova, neuvector-dbgen, protoc-gen-go-grpc, ytt, flannel, nsc, kubernetes-event-exporter, xcover, redka, cri-tools, certificate-transparency, cfssl, falco-exporter, xcaddy,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: etcd, cert-manager-webhook-pdns-fips, terraform-provider-tls-fips, cluster-proportional-autoscaler, syncthing, gops-fips, prometheus-adapter, falco-exporter-fips, minio-operator-fips, grpc-health-probe-fips, knative-operator, gosu-fips, terraform-provider-sendgrid, f...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: etcd, cert-manager-webhook-pdns-fips, terraform-provider-tls-fips, cluster-proportional-autoscaler, syncthing, gops-fips, prometheus-adapter, falco-exporter-fips, minio-operator-fips, grpc-health-probe-fips, knative-operator, gosu-fips, terraform-provider-sendgrid, f...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: etcd, cert-manager-webhook-pdns-fips, terraform-provider-tls-fips, cluster-proportional-autoscaler, syncthing, gops-fips, prometheus-adapter, falco-exporter-fips, minio-operator-fips, grpc-health-probe-fips, knative-operator, gosu-fips, terraform-provider-sendgrid, f...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: etcd, cert-manager-webhook-pdns-fips, terraform-provider-tls-fips, cluster-proportional-autoscaler, syncthing, gops-fips, prometheus-adapter, falco-exporter-fips, minio-operator-fips, grpc-health-probe-fips, knative-operator, gosu-fips, terraform-provider-sendgrid, f...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: etcd, cert-manager-webhook-pdns-fips, terraform-provider-tls-fips, cluster-proportional-autoscaler, syncthing, gops-fips, prometheus-adapter, falco-exporter-fips, minio-operator-fips, grpc-health-probe-fips, knative-operator, gosu-fips, terraform-provider-sendgrid, f...

AZL-69200 CVE-2025-58183 affecting package gh for versions less than 2.62.0-10

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...