171 matches found
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, amazon-k8s-cni-fips, scorecard, knative-serving, age, redka, aws-iam-authenticator, mc-fips, speedtest-go, kafka-proxy-fips, consul, prometheus-statsd-exporter, protoc-gen-go-grpc, kustomize-fips, capslock,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, amazon-k8s-cni-fips, scorecard, knative-serving, age, redka, aws-iam-authenticator, mc-fips, speedtest-go, kafka-proxy-fips, consul, prometheus-statsd-exporter, protoc-gen-go-grpc, kustomize-fips, capslock,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, amazon-k8s-cni-fips, scorecard, knative-serving, age, redka, aws-iam-authenticator, mc-fips, speedtest-go, kafka-proxy-fips, consul, prometheus-statsd-exporter, protoc-gen-go-grpc, kustomize-fips, capslock,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, amazon-k8s-cni-fips, scorecard, knative-serving, age, redka, aws-iam-authenticator, mc-fips, speedtest-go, kafka-proxy-fips, consul, prometheus-statsd-exporter, protoc-gen-go-grpc, kustomize-fips, capslock,...
Astra Linux – Vulnerability in libpod
There is a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file is stored in a Secret or a ConfigMap volume, and such volumes contain symbolic links to host file paths. In a successful attack, the attacker can control only the target...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
EUVD-2025-27030
Malicious code in bioql PyPI...
EUVD-2024-1950
Malicious code in bioql PyPI...
CLSA-2025-1759505734 podman: Fix of CVE-2025-9566
CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: prometheus-node-exporter-fips, cluster-api, k8sgpt-operator, gcp-compute-persistent-disk-csi-driver-fips, kube-logging-operator-custom-runner-fips, knative-serving, mongodb-k8s-operator-version-upgrade-post-start-hook, vault-benchmark, memcached-exporter-fips,...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
Directory Traversal
github.com/containers/podman is vulnerable to Directory Traversal.The vulnerability is due to a lack of symlink canonicalization and host-path validation; this allows an attacker who supplies a malicious Kubernetes YAML to cause podman to write the ConfigMap/Secret data contents are defined by th...
Linux Distros Unpatched Vulnerability : CVE-2025-9566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libpod - There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a...