EUVD-2024-17457

Malicious code in bioql PyPI...

EUVD-2023-3024

Malicious code in bioql PyPI...

EUVD-2023-1506

Malicious code in bioql PyPI...

EUVD-2023-1539

Malicious code in bioql PyPI...

EUVD-2022-6183

Malicious code in bioql PyPI...

EUVD-2022-0837

Malicious code in bioql PyPI...

EUVD-2023-2145

Malicious code in bioql PyPI...

EUVD-2022-2051

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, gobump, gatekeeper, timescaledb-tune, headlamp, glow, cluster-api-helm-controller, gendesk, containerd, docker-cli-buildx, kubernetes-csi-driver-nfs, tempo, cluster-api, consul-k8s, nova, cloud-provider-vsphere, cloud-sql-proxy,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: gitsign, addon-resizer, git-lfs, sftpgo-plugin-pubsub, ctop, vault-k8s, newrelic-fluent-bit-output, shfmt, vexctl, kube-vip-cloud-provider, kserve-rest-proxy, nats, confluent-common-docker, bank-vaults, docker-credential-ecr-login, php-fpmexporter, octo-sts, hivemind...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, apm-server-fips, blobfuse2, vault-k8s, stakater-reloader, cluster-api, openbao-k8s-fips, gostatsd, kuberay-operator, karma-fips, karpenter-fips, nats, local-path-provisioner, bank-vaults, configmap-reload-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, apm-server-fips, blobfuse2, vault-k8s, stakater-reloader, cluster-api, openbao-k8s-fips, gostatsd, kuberay-operator, karma-fips, karpenter-fips, nats, local-path-provisioner, bank-vaults, configmap-reload-fips,...

SUSE CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...

GHSA-4X4M-3C2P-QPPC vulnerabilities

Vulnerabilities for packages: kubernetes, vcluster, k8ssandra-client, kapp, ip-masq-agent, kubernetes-csi-driver-nfs, rancher-system-agent, argo-rollouts, mesosphere-vsphere-csi, emissary, nodetaint, kubernetes-csi-driver-hostpath, docker-machine-driver-harvester, local-static-provisioner,...

CVE-2025-58061 OpenEBS Local PV RawFile persistent volume data is world readable

OpenEBS Local PV RawFile allows dynamic deployment of Stateful Persistent Node-Local Volumes & Filesystems for Kubernetes. Prior to version 0.10.0, persistent volume data is world readable and that would allow non-privileged users to access sensitive data such as databases of k8s workload. The...