CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, ipfs-cluster-fips, dask-gateway, flannel-fips, custom-pod-autoscaler-fips, neuvector-sigstore-interface, vexctl, metacontroller, cluster-api-helm-controller-fips, knative-serving-fips, kiam, vendir-fips, skopeo-fips,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, ipfs-cluster-fips, dask-gateway, flannel-fips, custom-pod-autoscaler-fips, neuvector-sigstore-interface, vexctl, metacontroller, cluster-api-helm-controller-fips, knative-serving-fips, kiam, vendir-fips, skopeo-fips,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, ipfs-cluster-fips, dask-gateway, flannel-fips, custom-pod-autoscaler-fips, neuvector-sigstore-interface, vexctl, metacontroller, cluster-api-helm-controller-fips, knative-serving-fips, kiam, vendir-fips, skopeo-fips,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, ipfs-cluster-fips, dask-gateway, flannel-fips, custom-pod-autoscaler-fips, neuvector-sigstore-interface, vexctl, metacontroller, cluster-api-helm-controller-fips, knative-serving-fips, kiam, vendir-fips, skopeo-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, ipfs-cluster-fips, dask-gateway, flannel-fips, custom-pod-autoscaler-fips, neuvector-sigstore-interface, vexctl, metacontroller, cluster-api-helm-controller-fips, knative-serving-fips, kiam, vendir-fips, skopeo-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, ipfs-cluster-fips, dask-gateway, flannel-fips, custom-pod-autoscaler-fips, neuvector-sigstore-interface, vexctl, metacontroller, cluster-api-helm-controller-fips, knative-serving-fips, kiam, vendir-fips, skopeo-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, ipfs-cluster-fips, dask-gateway, flannel-fips, custom-pod-autoscaler-fips, neuvector-sigstore-interface, vexctl, metacontroller, cluster-api-helm-controller-fips, knative-serving-fips, kiam, vendir-fips, skopeo-fips,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, ipfs-cluster-fips, dask-gateway, flannel-fips, custom-pod-autoscaler-fips, neuvector-sigstore-interface, vexctl, metacontroller, cluster-api-helm-controller-fips, knative-serving-fips, kiam, vendir-fips, skopeo-fips,...

cmctl-2.3.0-1.1 on GA media (moderate)

cmctl-2.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15336-1 Rating: moderate Cross-References: CVE-2025-53547 CVSS scores: CVE-2025-53547 SUSE : 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H CVE-2025-53547 SUSE : 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H...

OPENSUSE-SU-2025:15336-1 cmctl-2.3.0-1.1 on GA media

These are all security issues fixed in the cmctl-2.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

cmctl-2.2.0-1.1 on GA media (moderate)

cmctl-2.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15039-1 Rating: moderate Cross-References: CVE-2024-40635 CVSS scores: CVE-2024-40635 SUSE : 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2025:15039-1 cmctl-2.2.0-1.1 on GA media

These are all security issues fixed in the cmctl-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: zarf, cluster-api-helm-controller, k8ssandra-client, k9s, chart-testing, chartmuseum, consul-k8s, rancher-helm, cert-manager-cmctl, cilium-cli, helm-push, kubescape, eksctl, flux-source-controller, trivy, helm-docs, helm-operator, flux, tw, kots, pluto,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: zarf, cluster-api-helm-controller, k8ssandra-client, k9s, chart-testing, chartmuseum, consul-k8s, rancher-helm, cert-manager-cmctl, cilium-cli, helm-push, kubescape, eksctl, flux-source-controller, trivy, helm-docs, helm-operator, flux, tw, kots, pluto,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux-helm-controller-fips, cloudbeat-fips, harbor, eksctl, consul-k8s, chart-testing-fips, helm-docs, cluster-api-helm-controller-fips, k8ssandra-client-fips, tw, trivy, k9s, cert-manager-cmctl-fips, helm-push, flux, pluto, consul-k8s-fips, chart-testing, rancher-hel...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: bom, govulncheck, modelmesh-runtime-adapter, gomplate, sbom-convert, gcp-compute-persistent-disk-csi-driver, s5cmd, harbor-registry, fuse-overlayfs-snapshotter, malcontent, xcaddy, nri-f5, aws-network-policy-agent, extism, flyte, terraform-provider-tls, nri-mongodb,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: bom, govulncheck, modelmesh-runtime-adapter, gomplate, sbom-convert, gcp-compute-persistent-disk-csi-driver, s5cmd, harbor-registry, fuse-overlayfs-snapshotter, malcontent, xcaddy, nri-f5, aws-network-policy-agent, extism, flyte, terraform-provider-tls, nri-mongodb,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: zarf, wolfictl, osv-scanner, cluster-api-helm-controller, spegel, k8ssandra-client, k8sgpt, kubevela, ctop, neuvector-scanner, docker-cli-buildx, chartmuseum, docker-compose, kargo, envoy-gateway, dagger, cert-manager-cmctl, newrelic-infrastructure-agent, cilium-cli,...

GHSA-R4PG-VG54-WXX4 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, cert-manager-cmctl, step-issuer, cert-exporter...

OPENSUSE-SU-2024:12603-1 cmctl-1.10.2-1.1 on GA media

These are all security issues fixed in the cmctl-1.10.2-1.1 package on the GA media of openSUSE Tumbleweed...