GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: jfrog-cli, kubernetes-dashboard-web, virt-controller, karpenter, minify-fips, flux-helm-controller-fips, prometheus-snmp-exporter, nginx-kubernetes-ingress-fips, calico-fips, neuvector-sigstore-interface-fips, oauth2-proxy, haproxy-ingress-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: gitlab-cng, apko, cerbos-fips, ratify-fips, vault-fips, temporal-ui-server-fips, chainloop-cli-fips, prometheus-mongodb-exporter-fips, falco-no-driver, kyverno-fips, nginx-kubernetes-ingress-fips, velero-fips, omni, azcopy, neuvector-sigstore-interface-fips,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: gitlab-cng, apko, cerbos-fips, ratify-fips, vault-fips, temporal-ui-server-fips, chainloop-cli-fips, prometheus-mongodb-exporter-fips, falco-no-driver, kyverno-fips, nginx-kubernetes-ingress-fips, velero-fips, omni, azcopy, neuvector-sigstore-interface-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: mariadb-operator-fips, cert-manager-istio-csr-fips, cert-manager-cmctl, percona-server-mongodb-operator, aws-privateca-issuer-fips, cert-manager-istio-csr, opentelemetry-operator-fips, mariadb-operator, percona-server-mongodb-operator-fips,...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-cmctl, step-issuer, cert-exporter...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-cmctl, step-issuer, cert-exporter...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager, aws-privateca-issuer, cert-manager-webhook-pdns-fips, cert-exporter, cert-exporter-fips, step-issuer, cert-manager-fips, aws-privateca-issuer-fips, cert-manager-webhook-pdns, cert-manager-istio-csr, cert-manager-cmctl-fips,...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager, aws-privateca-issuer, cert-manager-webhook-pdns-fips, cert-exporter, cert-exporter-fips, step-issuer, cert-manager-fips, aws-privateca-issuer-fips, cert-manager-webhook-pdns, cert-manager-istio-csr, cert-manager-cmctl-fips,...

Malicious code in eb-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde17b1e5e6a9e071d031714e31335d93e040635afe32c1cb655b8892e8e2d3b The package eb-csr was found to contain malicious code. Source: ghsa-malware 633a3693267851fd0c8eeee4cfc971fd7009c5c128d6a9ac0392d6ded3a8614f Any...

EUVD-2025-205786

Malicious code in eb-csr npm...

Malicious Package

Overview eb-csr is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2025-192967 Malicious code in eb-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde17b1e5e6a9e071d031714e31335d93e040635afe32c1cb655b8892e8e2d3b The package eb-csr was found to contain malicious code. Source: ghsa-malware 633a3693267851fd0c8eeee4cfc971fd7009c5c128d6a9ac0392d6ded3a8614f Any...

UBUNTU-CVE-2025-40222

In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and all other SCIF port types, but the RSCI overrunreg is specified as a memory offset, while for other SCIF types it is a...

EUVD-2025-201237

In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and all other SCIF port types, but the RSCI overrunreg is specified as a memory offset, while for other SCIF types it is a...

CVE-2025-40222 tty: serial: sh-sci: fix RSCI FIFO overrun handling

In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and all other SCIF port types, but the RSCI overrunreg is specified as a memory offset, while for other SCIF types it is a...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: clk: imx: Fixed an out-of-bounds access in dispmixcsrclkdevdata When numparents is 4, clkregister causes an out-of-bounds access when accessing the parentnames member. Use ARRAYSIZE instead of hardcoding the number here. BUG:...

EUVD-2015-4133

Malware in sbrugna...

CVE-2025-56301

Summary (CVE-2025-56301) — The issue affects Chipsalliance Rocket-Chip, tied to the CSR logic in the commit f517abbf41abb65cea37421d3559f9739efd00a9. The root cause is a flawed interaction between exception handling and the MRET return mechanism, which can trigger faulty trap behavior when an exc...

Linux Distros Unpatched Vulnerability : CVE-2024-23444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing...

CVE-2022-26494

An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript code must be used in a worker name before a Generate CSR request. Only an administrator can update a worker name...