Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: helm-push, terraform, grpc-health-probe, src-fingerprint, pvc-autoresizer, metacontroller, harbor-registry, sriov-network-device-plugin, kube-bench, kubernetes-csi-driver-hostpath, dataplaneapi, kwok, fixuid, maru, tofu-controller, hello-world-golang, oras, etcd, mag...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune, vt-cli, kaf...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor, terraform,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, harbor, terraform,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...