Improper Authentication Exposure

github.com/chaos-mesh/chaos-mesh is vulnerable to improper authentication exposure. The vulnerability is due to the Chaos Controller Manager exposing an unauthenticated GraphQL debugging server to the entire Kubernetes cluster, which allows an attacker to kill arbitrary processes in any pod...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, otel-cli, govulncheck, gosu, bom, src-fingerprint, xcover, wuzz, nsc, terraform-provider-sendgrid, whereabouts, glow, velero-plugin-for-microsoft-azure, cert-manager-cmctl, openbao-k8s, restic, oauth2-proxy, cue, kube-state-metrics, supercronic,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, otel-cli, govulncheck, portieris, promxy, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom, src-fingerprint,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, bom,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, regclient, sbom-scorecard, kafkaexporter, falco-exporter, age, hello-world-golang, http-echo, kubelet-csr-approver, mesosphere-vsphere-csi, govulncheck, otel-cli, portieris, helm-mapkubeapis, rancher-webhook, argo-rollouts, gosu, bom,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, rancher-loglevel, crossplane, nats, incert, chisel-fips, redka, rancher-helm, vault-secrets-operator, cluster-api-fips, ipfs-cluster, ghaudit, spark-operator-fips, vertical-pod-autoscaler-fips, container-object-storage-interface-fips, multus-cni,...