GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: nri-prometheus, nova, harbor, dfc, k8sgateway, kiali, chisel, kubernetes-csi-node-driver-registrar, doppler-kubernetes-operator, oauth2-proxy, go-bindata, coredns, portieris, conjur-cli, spiffe-helper, frp, prometheus-adapter, cortex, terraform-provider-azuread,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web, kubernetes-csi-node-driver-registrar,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, chisel, kubernetes-dashboard-web,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, nova, docker-cli-buildx, ghaudit, kubeflow-katib, velero-plugin-for-csi, certificate-transparency, mongo-tools, harbor, juicefs, dfc, kube-bench, bom, thanos-operator, chisel, kubernetes-dashboard-web,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, git-sync-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, task, vexctl, kubescape-operator-fips, crossplane-function-go-templating, harbor-scanner-trivy-fips, delve, kyverno, aws-sigv4-proxy,...

AZL-69200 CVE-2025-58183 affecting package gh for versions less than 2.62.0-10

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...