16 matches found
GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env
In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...
PT-2026-80446
In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...
GO-2020-0017 vulnerabilities
Vulnerabilities for packages: gitness, dgraph, docker-credential-acr-env, docker-credential-acr-env-fips...
GO-2020-0017 vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env, gitness, dgraph...
GO-2025-4008 vulnerabilities
Vulnerabilities for packages: terraform-provider-time, grpcurl, cadvisor, helm-push, age, sops, kubernetes-dashboard-metrics-scraper, harbor-registry, cert-manager-webhook-pdns, mongo-tools, docker-machine-driver-harvester, opensearch-k8s-operator, velero, cloud-sql-proxy, petname,...
GO-2025-4013 vulnerabilities
Vulnerabilities for packages: terraform-provider-time, grpcurl, cadvisor, helm-push, age, sops, kubernetes-dashboard-metrics-scraper, harbor-registry, cert-manager-webhook-pdns, mongo-tools, docker-machine-driver-harvester, opensearch-k8s-operator, velero, cloud-sql-proxy, petname,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: descheduler, frp, argocd-image-updater, aws-flb-kinesis, trufflehog, crossplane-provider-azure-authorization, crossplane-provider-aws-firehose, helm-push, addon-resizer, cass-operator, kubeflow-pipelines, sops, coredns, rancher-agent, harbor-registry,...
GO-2023-2402 vulnerabilities
Vulnerabilities for packages: zot, frp, trivy, cadvisor, crossplane-provider-azure-authorization, helm-push, kubeflow-pipelines, sops, grype, temporal, grpc-health-probe, mongo-tools, tekton-chains, flux-image-reflector-controller, prometheus-adapter, src-fingerprint, terraform-provider-sendgrid,...
GO-2024-2825 vulnerabilities
Vulnerabilities for packages: zot, frp, flux-notification-controller, grpcurl, cadvisor, trivy, helm-push, sops, kubernetes-dashboard-metrics-scraper, harbor-registry, cert-manager-webhook-pdns, mongo-tools, influx, tekton-chains, flux-image-reflector-controller, petname, prometheus-adapter,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: terraform-provider-time, grpcurl, cadvisor, helm-push, age, sops, kubernetes-dashboard-metrics-scraper, harbor-registry, cert-manager-webhook-pdns, mongo-tools, docker-machine-driver-harvester, opensearch-k8s-operator, velero, cloud-sql-proxy, petname,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: terraform-provider-time, grpcurl, cadvisor, helm-push, age, sops, kubernetes-dashboard-metrics-scraper, harbor-registry, cert-manager-webhook-pdns, mongo-tools, docker-machine-driver-harvester, opensearch-k8s-operator, velero, cloud-sql-proxy, petname,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: terraform-provider-time, grpcurl, cadvisor, helm-push, age, sops, kubernetes-dashboard-metrics-scraper, harbor-registry, cert-manager-webhook-pdns, mongo-tools, docker-machine-driver-harvester, opensearch-k8s-operator, velero, cloud-sql-proxy, petname,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: terraform-provider-time, grpcurl, cadvisor, helm-push, age, sops, kubernetes-dashboard-metrics-scraper, harbor-registry, cert-manager-webhook-pdns, mongo-tools, docker-machine-driver-harvester, opensearch-k8s-operator, velero, cloud-sql-proxy, petname,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: terraform-provider-time, grpcurl, cadvisor, helm-push, age, sops, kubernetes-dashboard-metrics-scraper, harbor-registry, cert-manager-webhook-pdns, mongo-tools, docker-machine-driver-harvester, opensearch-k8s-operator, velero, cloud-sql-proxy, petname,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: terraform-provider-time, grpcurl, cadvisor, helm-push, age, sops, kubernetes-dashboard-metrics-scraper, harbor-registry, cert-manager-webhook-pdns, mongo-tools, docker-machine-driver-harvester, opensearch-k8s-operator, velero, cloud-sql-proxy, petname,...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: consul-k8s, dapr-fips, external-secrets-operator-fips, slsa-verifier, consul, metrics-server, falcoctl-fips, kbld-fips, sbom-convert, rootlesskit-fips, dask-gateway, cfssl, stakater-reloader, prometheus-podman-exporter, nerdctl, restic, flux-fips, k3d,...