CVE-2025-58190 affecting package sriov-network-device-plugin for versions less than 3.6.2-11

CVE-2025-58190 affecting package sriov-network-device-plugin for versions less than 3.6.2-11. A patched version of the package is available...

CVE-2025-47911 affecting package sriov-network-device-plugin for versions less than 3.6.2-11

CVE-2025-47911 affecting package sriov-network-device-plugin for versions less than 3.6.2-11. A patched version of the package is available...

Azure Linux 3.0 Security Update: sriov-network-device-plugin (CVE-2022-1996)

The version of sriov-network-device-plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1996 advisory. - Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restfu...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, fulcio, kube-logging-logging-operator, protoc-gen-go-grpc, cert-exporter-fips, cilium-envoy-fips, influxd, terraform, cloudbeat-fips, kustomize-fips, metacontroller, envconsul-fips, gcp-compute-persistent-disk-csi-driver-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, fulcio, kube-logging-logging-operator, protoc-gen-go-grpc, cert-exporter-fips, cilium-envoy-fips, influxd, terraform, cloudbeat-fips, kustomize-fips, metacontroller, envconsul-fips, gcp-compute-persistent-disk-csi-driver-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, fulcio, kube-logging-logging-operator, protoc-gen-go-grpc, cert-exporter-fips, cilium-envoy-fips, influxd, terraform, cloudbeat-fips, kustomize-fips, metacontroller, envconsul-fips, gcp-compute-persistent-disk-csi-driver-fips,...

Malicious code in react-device-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 113702b97f378bfde6af287d00821b1e3ebec6cfa164e3d263f57632210869c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview react-device-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47492 Malicious code in react-device-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 113702b97f378bfde6af287d00821b1e3ebec6cfa164e3d263f57632210869c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Azure Linux 3.0 Security Update: cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device-plugin (CVE-2025-22872)

The version of cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device- plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22872 advisory. - The...

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.7.0-4

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.7.0-4. A patched version of the package is available...

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.6.2-9

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.6.2-9. A patched version of the package is available...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: neuvector-dbgen, cloud-provider-aws, nri-couchbase, prometheus-alertmanager, trust-manager, grpc-health-probe, kubevela, kubernetes-replicator, ctop, ytt, multus-cni, render-template, trino, spire-server, php-fpmexporter, confluent-common-docker, ghaudit, gcsfuse,...

Azure Linux 3.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)

The version of sriov-network-device-plugin / vitess installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...

CBL Mariner 2.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)

The version of sriov-network-device-plugin / vitess installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.6.2-8

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.6.2-8. A patched version of the package is available...

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3. A patched version of the package is available...

AZL-56078 CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: podman, kubernetes-dashboard-fips, kube-logging-logging-operator, protoc-gen-go-grpc, neuvector, cilium-envoy-fips, terraform, crossplane-provider-sql, kustomize-fips, sqlexporter-fips, kubernetes-ingress-defaultbackend-fips, kuma, metacontroller,...

CVE-2024-45338 affecting package sriov-network-device-plugin for versions less than 3.7.0-2

CVE-2024-45338 affecting package sriov-network-device-plugin for versions less than 3.7.0-2. A patched version of the package is available...