CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: authservice, jupyterhub-k8s-image-awaiter-fips, openbao, vault-k8s, crossplane-provider-aws-rds-fips, swagger, falco-exporter, sftpgo-plugin-kms, opentelemetry-operator, flyte, aws-privateca-issuer, aws-node-termination-handler-fips, amazon-ecs-agent-fips, db-operato...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, opentelemetry-operator, aws-privateca-issuer, mariadb-operator, cert-manager-openshift-routes, percona-xtradb-cluster-operator-fips, mariadb-operator-fips, cert-manager-csi-driver-fips, step-issuer, cert-manager-cmctl-fips,...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, step-issuer, cert-manager-csi-driver, cert-manager-istio-csr, percona-server-mongodb-operator, cert-manager-webhook-pdns, cert-manager-cmctl, aws-privateca-issuer, mariadb-operator...

CLEANSTART-2026-MY73913 Security fixes for GHSA-R6J8-C6R2-37RR applied in versions: 4.12.1-r0

Security vulnerability affects the kubernetes-csi-driver-nfs package. This issue is resolved in later releases. See references for vulnerability details...

EUVD-2024-1746

Malicious code in bioql PyPI...

EUVD-2022-6183

Malicious code in bioql PyPI...

EUVD-2023-1539

Malicious code in bioql PyPI...

EUVD-2022-0837

Malicious code in bioql PyPI...

EUVD-2022-2051

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: ini-file, swagger, conftest, lazydocker, vault, aws-privateca-issuer, rabbitmq-default-user-credential-updater, headlamp, kuberlr, grafana-alloy, nri-redis, kube-logging-operator, grafana-rollout-operator, controller-gen, clickhouse-operator, nova, tempo, cilium-cli,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: karma-fips, vault-k8s, nvidia-nsight-compute-12.8, linkerd2-proxy-init, secrets-store-csi-driver-provider-aws, docker-credential-ecr-login, kubernetes-dashboard-fips, vexctl, kube-vip, blob-csi-fips, ctop, gostatsd, confluent-common-docker,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: karma-fips, vault-k8s, nvidia-nsight-compute-12.8, linkerd2-proxy-init, secrets-store-csi-driver-provider-aws, docker-credential-ecr-login, kubernetes-dashboard-fips, vexctl, kube-vip, blob-csi-fips, ctop, gostatsd, confluent-common-docker,...

SUSE CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, victoriametrics-operator, stern, k8sgpt, stakater-reloader, crossplane-provider-aws-cloudwatchlogs, go-discover, aactl, eksctl, crossplane-provider-aws-kms, flux-helm-controller, promxy, yunikorn-k8shim, haproxy-ingress, flyte,...

CVE-2022-31077

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message response from KubeEdge can crash the CSI Driver controller server by triggering a nil-pointer dereference panic. As a...