CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, harbor, terraform,...

Astra Linux – Vulnerability in libpod

There is a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file is stored in a Secret or a ConfigMap volume, and such volumes contain symbolic links to host file paths. In a successful attack, the attacker can control only the target...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

EUVD-2025-27030

Malicious code in bioql PyPI...

EUVD-2024-1950

Malicious code in bioql PyPI...

CLSA-2025-1759505734 podman: Fix of CVE-2025-9566

CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: etcd-fips, lvm-driver, mattmoor-chainit, kuberay-operator, kubernetes-dashboard-fips, terraform-provider-sendgrid-fips, kserve-rest-proxy, local-path-provisioner, octo-sts, karma-fips, knative-serving, cloud-provider-aws, grafana-operator,...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

Directory Traversal

github.com/containers/podman is vulnerable to Directory Traversal.The vulnerability is due to a lack of symlink canonicalization and host-path validation; this allows an attacker who supplies a malicious Kubernetes YAML to cause podman to write the ConfigMap/Secret data contents are defined by th...

Linux Distros Unpatched Vulnerability : CVE-2025-9566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap...