269 matches found
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, crossplane-provider-aws-sns, headlamp, ksops, kubelet-csr-approver, flux-notification-controller, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, x509-certificate-exporter, crossplane-provider-aws-cloudwatchlogs,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: headlamp, ipfs-cluster, spqr, steampipe, cilium-cli, conjur-cli, mockgen, external-dns, aws-flb-cloudwatch, ferretdb, metacontroller, nri-memcached, ingress-nginx-controller, gitlab-runner, litestream, eksctl, nri-cassandra, sonobuoy, flux-kustomize-controller,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, crossplane-provider-aws-sns, headlamp, ksops, kubelet-csr-approver, flux-notification-controller, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, x509-certificate-exporter, crossplane-provider-aws-cloudwatchlogs,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, ytt, hubble-ui-backend-fips, trillian-fips, minc, gogatekeeper, chisel-fips, longhorn-engine, longhorn-manager-fips, crossplane-provider-family-aws-fips, dockerize-fips,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, ytt, hubble-ui-backend-fips, trillian-fips, minc, gogatekeeper, chisel-fips, longhorn-engine, longhorn-manager-fips, crossplane-provider-family-aws-fips, dockerize-fips,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, ytt, hubble-ui-backend-fips, trillian-fips, minc, gogatekeeper, chisel-fips, longhorn-engine, longhorn-manager-fips, crossplane-provider-family-aws-fips, dockerize-fips, metallb,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, ytt, hubble-ui-backend-fips, trillian-fips, minc, gogatekeeper, chisel-fips, longhorn-engine, longhorn-manager-fips, crossplane-provider-family-aws-fips, dockerize-fips, metallb,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, ytt, hubble-ui-backend-fips, trillian-fips, minc, gogatekeeper, chisel-fips, longhorn-engine, longhorn-manager-fips, crossplane-provider-family-aws-fips, dockerize-fips, metallb,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, ytt, hubble-ui-backend-fips, trillian-fips, minc, gogatekeeper, chisel-fips, longhorn-engine, longhorn-manager-fips, crossplane-provider-family-aws-fips, dockerize-fips,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, ytt, hubble-ui-backend-fips, trillian-fips, minc, gogatekeeper, chisel-fips, longhorn-engine, longhorn-manager-fips, crossplane-provider-family-aws-fips, dockerize-fips, metallb,...
AZL-75491 CVE-2025-11065 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
GHSA-JHJH-HCM6-MRCC vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure...
CVE-2025-67743 Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service
Local Deep Research is an AI-powered research assistant for deep, iterative research. In versions from 1.3.0 to before 1.3.9, the download service downloadservice.py makes HTTP requests using raw requests.get without utilizing the application's SSRF protection saferequests.py. This can allow...
CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24
CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24. A patched version of the package is available...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: headlamp, ipfs-cluster, gomplate, spqr, steampipe, kubernetes, external-dns, aws-flb-cloudwatch, harbor, nri-memcached, openbao, ingress-nginx-controller, pdfcpu, nri-cassandra, sonobuoy, thanos-operator, rootlesskit, opensearch-k8s-operator, newrelic-infra-operator,...
Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks
New research has uncovered that publishers of over 100 Visual Studio Code VS Code extensions leaked access tokens that could be exploited by bad actors to update the extensions, posing a critical software supply chain risk. "A leaked VS Code Marketplace or Open VSX PAT personal access token allow...
EUVD-2021-27371
Malware in sbrugna...
EUVD-2021-2368
Malware in sbrugna...