Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, tfsec, rancher-system-agent, nerdctl,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, terraform-provider-random, trivy, kubecolor, nodetaint, thanos-operator, newrelic-nri-statsd, cfssl, cluster-api-helm-controller, extism, xeol, wire-go, harbor-registry, wait-for-port, restic, kubeflow-katib, xcaddy, sealed-secrets,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, nodetaint, tfsec, rancher-system-agent, nerdctl, gosu, argo-rollouts,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, yunikorn-web, gops, pguser, terraform-provider-random, velero, conjur-cli, nfs-subdir-external-provisioner, manifest-tool, cargobump, kube-bench, kaf, kubecolor, litefs, mesosphere-vsphere-csi, nodetaint, tfsec, rancher-system-agent,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: mattmoor-chainit, kuberay-operator-fips, govulncheck, cfssl, stampdalf, karpenter-fips, kube-logging-operator-custom-runner, ghaudit, gosu, cadvisor, apisix-ingress-controller, contour, maru, kyverno-policy-reporter-plugins-trivy-fips, sonobuoy-fips, trillian, spqr,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: mattmoor-chainit, kuberay-operator-fips, govulncheck, cfssl, stampdalf, karpenter-fips, kube-logging-operator-custom-runner, ghaudit, gosu, cadvisor, apisix-ingress-controller, contour, maru, kyverno-policy-reporter-plugins-trivy-fips, sonobuoy-fips, trillian, spqr,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: mattmoor-chainit, kuberay-operator-fips, govulncheck, cfssl, stampdalf, karpenter-fips, kube-logging-operator-custom-runner, ghaudit, gosu, cadvisor, apisix-ingress-controller, contour, maru, kyverno-policy-reporter-plugins-trivy-fips, sonobuoy-fips, trillian, spqr,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: mattmoor-chainit, kuberay-operator-fips, govulncheck, cfssl, stampdalf, karpenter-fips, kube-logging-operator-custom-runner, ghaudit, gosu, cadvisor, apisix-ingress-controller, contour, maru, kyverno-policy-reporter-plugins-trivy-fips, sonobuoy-fips, trillian, spqr,...