CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, gostatsd, cfssl, rancher-webhook, iptables-wrappers, http-echo, kubescape-operator, kube-vip-cloud-provider, prometheus-adapter, docker-credential-ecr-login, timoni, aws-node-termination-handler, istio, kube-bench,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, gops, argo-rollouts, prometheus-alertmanager-fips, vault-env, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, docker-credential-acr-env, prometheus-mysqld-exporter,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, gops, argo-rollouts, prometheus-alertmanager-fips, vault-env, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, docker-credential-acr-env, prometheus-mysqld-exporter,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, gops, argo-rollouts, prometheus-alertmanager-fips, vault-env, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, docker-credential-acr-env, prometheus-mysqld-exporter,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, gops, argo-rollouts, prometheus-alertmanager-fips, vault-env, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, docker-credential-acr-env, prometheus-mysqld-exporter,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, gops, argo-rollouts, prometheus-alertmanager-fips, vault-env, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, docker-credential-acr-env, prometheus-mysqld-exporter,...

AZL-69200 CVE-2025-58183 affecting package gh for versions less than 2.62.0-10

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...

CVE-2025-54545 On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges...

CVE-2025-54545 On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges...

CVE-2025-54545

CVE-2025-54545 is a local privilege-escalation in Arista DANZ Monitoring Fabric (DMF) and related products. A restricted user could break out of the CLI sandbox to the system shell, gaining elevated privileges. Arista’s Security Advisory 0124 confirms affected products across DMF, Converged Cloud...