bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

better-auth

Discord · Website · Issues Better Auth Better Auth is a framework-agnostic authentication and authorization framework for TypeScript. It provides a comprehensive set of features out of the box and includes a plugin ecosystem that simplifies adding advanced functionalities with minimal code in a...

safer-dependencies

Safer Dependencies for Claude Code When AI coding assistants like Claude add packages to your project, they often pick whatever version sounds right — without checking whether it has known security vulnerabilities, whether the package is still actively maintained, or whether the name is a typo aw...

OreNPMGuard

OreNPMGuard - Shai-Hulud Package Scanner Version 2.0.0 - Shai-Hulud 2.0 Detection & Enhanced Prevention System A security tool to detect compromised npm packages from the Shai-Hulud supply chain attacks original September 2025 and Shai-Hulud 2.0 November 2025. Scans both package.json and...

serverless

Website • Documentation • X / Twitter • Community Slack • Forum The Serverless Framework – Makes it easy to use AWS Lambda and other managed cloud services to build applications that auto-scale, cost nothing when idle, and result in radically low maintenance. The Serverless Framework is a...

ransomware_map

Orange Cyberdefense CERT - Ransomware Ecosystem Map Latest = version 29 January 2026 - incoming Map visualizing relationships and timelines associated to +300 ransomware groups, between 2015 and 2026. Hope this helps! World Watch team - Global CERT Orange Cyberdefense All rights reserved...

Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...

guarddog

GuardDog GuardDog is a CLI tool that identifies malicious PyPI and npm packages, Go modules, Rust crates, RubyGems, GitHub actions, or VSCode extensions. It runs static analysis on package source code through YARA rules and analyzes package metadata to detect supply chain attacks. What makes...

CocoaPods-RCE_CVE-2024-38366

CocoaPods-RCE This repo includes a little bit more deep dive into the research process and thoughts behind the RCE vulnerability found as part of researching and breaking the CocoaPods Package Manager. The research publication blog post can be read here:...

Presentations

Presentations 2026 HITCON 2026 - 21st - 22nd August 2026 Pwn2OwNothing: When a KVM Full-Chain Escapes to Emptiness by PAN Zhenpeng, Billy JHENG Bing Jhong, Bruce CHEN & SHI Weiming 2025 CodeBlue 2025 - 18th to 19th November 2025 AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP...

DesckVB-RAT

DesckVB RAT v2.9 — Modular .NET RAT, Multi-Stage Delivery & Plugin Ecosystem Toolchain Linkage to “Pjoao1578” Author: ShadowOpCode X/Twitter: https://x.com/ShadowOpCode This repository accompanies a full technical report documenting an active malware ecosystem centered around DesckVB RAT , a...

katoolin3

katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...

xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

bigint-buffer-safe

bigint-buffer-safe Safe, pure-JS drop-in replacement for bigint-buffer. Fixes CVE-2025-3194 CVSS 7.5, buffer overflow / DoS. Zero dependencies. No native bindings. Works in Node.js and browsers. Why does this exist? The original bigint-buffer package has a high-severity buffer overflow...

confused

Confused Una herramienta para verificar espacios de nombres libres persistentes para nombres de paquetes privados referenciados en la configuración de dependencias para Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json o MVN maven pom.xml. ¿De qué se trata todo...

ore-mal-pkg-inspector

OreWatch Detección de Paquetes Maliciosos Multi-Ecosistema y Escáner de Seguridad en la Cadena de Suministro Una herramienta de seguridad de grado de producción para detectar paquetes maliciosos y amenazas en la cadena de suministro en los ecosistemas npm, PyPI, Maven, RubyGems, Go y Cargo...

Growing the WIN AI Ecosystem with Agent Integrations

WINning AI with AI: How the Wiz MCP for WIN partners accelerates a connected ecosystem...

CLEANSTART-2026-CT17249 Security fix for CVE-2025-68121 applied in: apache-nifi 2.10.0-r4, argo-cd-fips 3.0.22-r1, argo-cd-fips 3.1.11-r0, argo-cd-fips 3.1.12-r1, argo-workflows 3.6.17-r0, argo-workflows 3.7.7-r0, argo-workflows 3.7.8-r0, argo-workflows-fips 3.6.16-r0, argo-workflows-fips 3.6.17-r0, aws-ebs-csi-driver 1.54.0-r0, aws-efs-csi-driver 2.2.0-r0, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, calico-fips 3.31.2-r2, cass-operator 1.28.1-r0, cert-manager-fips 1.17.4-r1, certificate-transparency-trillian-ctserver 1.3.2-r1, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cloudnative-pg-fips 1.24.4-r1, cloudnative-pg-fips 1.25.4-r1, cni-plugin-flannel 1.6.0-r0, configmap-reload 0.15.0-r0, coredns 1.14.1-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, crossplane 2.0.2-r0, dcgm-exporter 4.5.1-r0, descheduler 0.34.0-r1, distribution 3.0.0-r1, druid-exporter-fips 0.10-r2, druid-exporter-fips 0.11-r3, druid-exporter-fips 0.8-r1, druid-exporter-fips 0.9-r1, dynamic-localpv-provisioner 4.4.0-r2, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-scheduler-fips 1.34.3-r0, envoy-ratelimit 0.0.0_git20251231-r0, external-dns 0.18.0-r0, external-secrets 0.20.4-r0, external-secrets-fips 0.17.0-r2, external-secrets-fips 0.20.4-r2, external-secrets-fips 1.2.0-r0, fluent-operator-fips 3.2.0-r6, flux-image-automation-controller-fips 4.0.1-r0, flux-notification-controller-fips 1.5.0-r0, git-lfs 3.7.0-r1, git-lfs-fips 3.7.0-r2, git-sync 4.5.1-r1, gitlab-kas 18.5.1-r0, gitlab-pages 18.7.1-r0, gitlab-pages-fips 18.7.1-r0, go-discover 0_git20250325-r0, go-fips-1.25 1.25.6-r1, go1.26 1.25.5-r1, grafana-mimir 3.0.2-r0, grafana-mimir-fips 3.0.2-r0, haproxy-ingress 0.15.1-r0, harbor 2.12.4-r0, harbor 2.13.5-r0, harbor 2.14.3-r0, harbor 2.15.0-r0, harbor-fips 2.13.5-r0, harbor-fips 2.14.3-r0, harbor-fips 2.15.0-r0, harbor-registry 3.0.0.1-r3, harbor-registry-fips 3.0.0.1-r4, helm 3.19.5-r0, helm 4.0.1-r0, helm-fips 3.19.5-r0, helm-fips 4.0.5-r0, helm-operator-fips 1.41.1-r2, ip-masq-agent 2.12.6-r1, istio-fips 1.26.8-r0, istio-fips 1.28.3-r0, istio-pilot-discovery-fips 1.28.3-r0, jitsucom-bulker 2.11.913-r1, k8ssandra-client-fips 0.5.0-r6, k8ssandra-client-fips 0.8.7-r0, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.29.0-r1, kafka_exporter-fips 1.6.0-r0, kafka_exporter-fips 1.7.0-r1, kapp-controller-fips 0.59.0-r2, kserve 0.16.0-r0, kserve-rest-proxy 0.12.0-r1, kube-bench-fips 0.14.1-r0, kube-state-metrics 2.16.0-r3, kubernetes-csi-driver-nfs-fips 4.12.1-r1, kubernetes-csi-driver-nfs-fips 4.13.0-r0, kubernetes-csi-external-attacher 4.10.0-r0, kubernetes-csi-external-attacher-fips 4.10.0-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r0, kubernetes-csi-external-resizer 2.0.0-r0, kubernetes-csi-external-resizer-fips 2.0.0-r0, kubernetes-csi-external-snapshotter-fips 8.4.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubernetes-dashboard-auth 1.4.0-r1, kubernetes-dashboard-auth-fips 1.4.0-r1, kubernetes-dashboard-metrics-scraper 1.2.2-r0, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r0, kubernetes-dashboard-web 1.7.0-r0, kubernetes-replicator-fips 2.12.2-r0, kubescape 3.0.47-r0, kured 1.20.0-r0, kustomize 5.7.1-r1, kustomize-fips 5.7.1-r1, kyverno-fips 1.13.6-r9, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9, linkerd2 25.12.3-r0, local-static-provisioner 2.8.0-r1, logstash-exporter 1.9.1-r2, logstash-exporter-fips 1.8.4-r1, logstash-fips 9.2.4-r2, metallb-fips 0.15.3-r0, minio-operator 7.1.1-r3, minio-operator-fips 5.0.18-r6, minio-operator-fips 6.0.4-r8, minio-operator-fips 7.0.1-r8, minio-operator-fips 7.1.1-r8, newrelic-fluent-bit-output 2.4.0-r0, newrelic-infrastructure-agent 1.71.4-r0, newrelic-nri-kube-events 2.16.4-r0, newrelic-prometheus-configurator 2.4.4-r0, nginx-prometheus-exporter 1.5.1-r1, nginx-prometheus-exporter-fips 1.5.1-r1, node-feature-discovery 0.18.3-r2, node-problem-detector 0.8.19-r1, nri-kubernetes 3.51.2-r0, openbao 2.4.3-r1, openbao-fips 2.3.2-r4, openbao-fips 2.5.0-r0, opensearch-k8s-operator-fips 2.5.1-r1, opensearch-k8s-operator-fips 2.6.1-r2, opensearch-k8s-operator-fips 2.6.1-r7, opensearch-k8s-operator-fips 2.7.0-r8, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1, prometheus-elasticsearch-exporter 1.10.0-r0, prometheus-elasticsearch-exporter-fips 1.10.0-r0, prometheus-mysqld-exporter 0.18.0-r0, prometheus-mysqld-exporter-fips 0.18.0-r0, prometheus-node-exporter 1.8.0-r3, prometheus-operator 0.87.1-r0, prometheus-operator-fips 0.88.0-r0, prometheus-operator-fips 0.88.0-r1, prometheus-redis-exporter-fips 1.77.0-r2, prometheus-redis-exporter-fips 1.78.0-r2, prometheus-redis-exporter-fips 1.79.0-r2, prometheus-redis-exporter-fips 1.80.0-r0, prometheus-redis-exporter-fips 1.80.1-r1, prometheus-statsd-exporter 0.28.0-r0, promxy 0.0.93-r1, pulumi-kubernetes-operator 1.16.0-r0, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rancher-agent 2.13.1-r0, rclone 1.72.1-r1, runc 1.1.14-r0, sealed-secrets 0.33.1-r0, sealed-secrets 0.34.0-r0, sigstore-scaffolding 0.7.29-r2, sigstore-scaffolding 0.7.31-r2, smarter-device-manager-fips 1.20.12-r0, spark-operator 2.1.1-r3, spark-operator 2.2.1-r0, spark-operator 2.3.0-r0, spark-operator 2.4.0-r0, spire-server 1.14.1-r2, spire-server-fips 1.14.1-r2, stakater-reloader-fips 1.2.1-r3, step-ca-fips 0.29.0-r0, step-issuer 0.9.11-r1, syft 1.39.0-r0, tekton-chains 0.26.0-r3, tekton-chains-fips 0.26.0-r3, tekton-pipelines 1.5.0-r3, tekton-pipelines-fips 1.5.0-r1, temporal 1.5.1-r0, temporal-ui-server-fips 2.44.0-r0, terragrunt-fips 0.94.0-r0, terragrunt-fips 0.95.1-r0, timoni 0.25.2-r0, trillian 1.7.2-r0, trino 479-r0, trust-manager-fips 0.20.3-r0, trust-manager-fips 0.21.1-r0, vault 1.21.2-r0, velero 1.17.2-r0, velero-fips 1.17.1-r1, velero-fips 1.17.2-r1, velero-plugin-for-aws 1.10.1-r1, velero-plugin-for-aws 1.12.2-r2, vertical-pod-autoscaler 1.5.1-r2, vertical-pod-autoscaler-fips 1.5.1-r1, victoriametrics-cluster 1.132.0-r1, victoriametrics-cluster-fips 1.132.0-r0, victoriametrics-operator 0.65.0-r1, victoriametrics-operator-fips 0.65.0-r1, wave-fips 0.10.0-r1, wave-fips 0.9.0-r3, weaviate 1.35.2-r0, whereabouts 0.9.2-r0, yunikorn-k8shim 1.7.0-r0, yunikorn-web 1.7.0-r0, yunikorn-web-fips 1.7.0-r0, zot 2.1.13-r0

CVE-2025-68121 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TA66488 Security fix for GHSA-pc3f-x583-g7j2 applied in: argo-cd 3.2.7-r2, argo-cd 3.3.5-r0, argo-cd-fips 3.0.23-r1, argo-cd-fips 3.1.14-r0, argo-cd-fips 3.2.9-r0, argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, argo-workflows 3.6.19-r5, cert-manager-cmctl-fips 2.4.0-r3, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.28.1-r3, dynamic-localpv-provisioner 4.3.0-r1, dynamic-localpv-provisioner 4.5.0-r1, dynatrace-operator 1.9.0-r0, flux-notification-controller-fips 1.5.0-r0, gitlab-runner 18.11.1-r0, helm 4.0.5-r2, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, istio 1.27.9-r0, istio 1.28.5-r3, istio-fips 1.25.5-r5, istio-fips 1.26.8-r2, istio-fips 1.27.8-r3, istio-fips 1.27.9-r0, istio-fips 1.28.5-r3, istio-fips 1.30.0-r0, istio-pilot-discovery 1.28.3-r1, istio-pilot-discovery-fips 1.28.3-r1, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, k8ssandra-client-fips 0.5.0-r10, k8ssandra-client-fips 0.6.4-r8, k8ssandra-client-fips 0.7.0-r6, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, kubernetes 1.34.1-r4, kubernetes 1.35.3-r2, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubevela 1.10.8-r0, kured 1.20.0-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, percona-server-mongodb-operator 1.22.0-r1, percona-xtradb-cluster-operator 1.19.1-r0, percona-xtradb-cluster-operator-fips 1.16.1-r1, percona-xtradb-cluster-operator-fips 1.17.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r4, percona-xtradb-cluster-operator-fips 1.19.1-r0, postgres-operator 1.12.2-r2, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-cluster-operator 2.20.0-r1, tigera-operator 1.41.1-r0, timoni 0.25.2-r0, velero-fips 1.17.2-r6, velero-fips 1.18.0-r2

GHSA-pc3f-x583-g7j2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CF01262 Security fix for CVE-2026-25681 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300066.1-r1, apache-nifi 2.10.0-r4, apko 1.2.13-r0, argo-cd 3.2.7-r3, argo-cd 3.3.5-r2, argo-workflows 4.0.5-r0, authservice 1.1.5-r1, authservice 1.1.6-r1, aws-load-balancer-controller 3.2.0-r0, aws-network-policy-agent 1.3.2-r1, aws-network-policy-agent-fips 1.3.2-r0, cadvisor 0.55.1-r1, cadvisor 0.57.0-r0, cadvisor-fips 0.55.1-r0, cert-manager 1.17.4-r2, cert-manager 1.18.6-r1, cert-manager 1.20.0-r0, cert-manager 1.20.2-r0, cert-manager-webhook-pdns-fips 2.5.5-r1, cfssl 1.5.0-r1, cloudnative-pg 1.29.1-r0, cloudnative-pg 1.29.1-r2, cloudprober 0.14.3-r1, cluster-autoscaler 1.35.2-r2, consul 2.0.1-r0, cortex 1.21.0-r2, cosign 3.0.6-r1, dex 2.42.1-r4, dex 2.44.0-r3, dex 2.45.1-r3, dynatrace-operator 1.6.3-r1, elastic-beats 9.2.8-r2, elastic-beats-fips 9.2.8-r0, external-secrets-fips 0.17.0-r2, external-secrets-operator 2.5.0-r1, external-secrets-operator 2.6.0-r1, fluent-operator 3.9.0-r2, flux-notification-controller-fips 1.5.0-r0, forecastle 1.0.159-r1, fulcio-fips 1.7.1-r3, gostatsd 28.3.0-r2, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, grafana-org-operator 1.13.0-r0, haproxy-ingress 0.14.12-r1, helm 4.0.5-r2, helm-operator 1.42.2-r0, ingress-nginx-controller 1.14.5-r1, istio 1.29.2-r1, istio-fips 1.26.8-r4, istio-fips 1.27.9-r2, istio-fips 1.28.7-r0, istio-fips 1.30.0-r1, k8ssandra-operator 1.26.0-r0, kube-bench 0.15.0-r1, kube-rbac-proxy 0.20.2-r2, kube-rbac-proxy 0.21.2-r0, kube-rbac-proxy-fips 0.20.2-r2, kube-state-metrics 2.10.1-r2, kube-state-metrics 2.15.0-r2, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.1.0-r1, kuberay-operator 1.3.2-r3, kuberay-operator 1.4.2-r3, kuberay-operator 1.5.2-r3, kuberay-operator 1.6.2-r2, kubernetes 1.36.1-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r4, kubernetes-csi-external-provisioner-fips 6.2.1-r3, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-csi-external-snapshotter-fips 8.4.0-r4, kubernetes-csi-livenessprobe-fips 2.19.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r1, kubernetes-csi-node-driver-registrar-fips 2.15.0-r5, kubernetes-csi-node-driver-registrar-fips 2.16.0-r4, kubernetes-dashboard-metrics-scraper 1.2.2-r2, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r1, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, kubevela 1.10.8-r0, kubewatch 2.12.0-r1, kured 1.20.0-r0, kyverno 1.18.1-r1, local-path-provisioner 0.0.36-r1, local-path-provisioner-fips 0.0.36-r1, local-static-provisioner 2.8.0-r2, lvm-driver 1.10.0-r4, melange 0.50.0-r1, melange 0.56.1-r1, memcached-exporter 0.16.0-r0, metacontroller 4.12.13-r1, metacontroller 4.13.1-r1, metacontroller 4.14.0-r1, metacontroller 4.15.0-r1, metallb 0.16.1-r0, metallb 0.16.1-r1, minio-client 0.20250721.052808-r1, mongodb 7.0.32-r1, mongodb 8.0.20-r1, mongodb 8.0.21-r1, mongodb 8.2.6-r1, mongodb 8.3.2-r1, mountpoint-s3-csi-driver 2.3.0-r1, newrelic-infrastructure-agent 1.73.1-r1, newrelic-nri-kube-events 2.16.4-r2, ollama 0.20.3-r3, ollama 0.31.2-r2, ollama 0.32.11-r2, ollama-fips 0.32.11-r2, opa 1.17.0-r1, percona-server-mongodb-operator 1.22.0-r1, percona-server-mongodb-operator 1.23.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r5, policy-controller-fips 0.15.1-r1, postgres-operator 1.12.2-r2, postgres-operator 1.15.1-r1, prometheus 3.11.2-r0, prometheus 3.5.2-r1, prometheus-alertmanager 0.32.0-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mysqld-exporter 0.15.0-r3, prometheus-node-exporter-fips 1.11.1-r1, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway 1.8.0-r2, prometheus-pushgateway 1.9.0-r1, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r1, prometheus-pushgateway-fips 1.8.0-r2, promxy-fips 0.0.93-r1, pulumi-kubernetes-operator 2.7.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rabbitmq-messaging-topology-operator 1.19.2-r0, rancher-fleet-agent 0.12.17-r3, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r3, rancher-fleet-agent 0.15.4-r3, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, restic-fips 0.18.1-r7, runc 1.4.2-r0, rundeck 6.0.0-r0, sealed-secrets 0.34.0-r0, sealed-secrets 0.35.0-r4, sealed-secrets 0.36.6-r1, secrets-store-csi-driver-provider-gcp 1.15.0-r1, secrets-store-csi-driver-provider-gcp 1.17.0-r2, smarter-device-manager 1.1.2-r0, spire-server 1.13.5-r1, spire-server 1.14.5-r1, spire-server-fips 1.14.5-r1, stakater-reloader 1.2.1-r0, step 0.30.2-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, syft 1.45.0-r2, tempo 2.10.4-r1, temporal 1.5.1-r0, temporal-server 1.31.0.153.1-r0, temporal-ui-server-fips 2.51.1-r1, tigera-operator 1.42.0-r0, tigera-operator-fips 1.37.2-r4, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.45.0-r1, trust-manager 0.22.1-r2, trust-manager-fips 0.20.3-r2, trust-manager-fips 0.21.1-r2, vault 1.20.4-r5, vault 1.21.4-r5, vault 2.0.0-r1, vault-k8s 1.7.4-r0, velero 1.18.1-r0, velero-plugin-for-aws 1.12.2-r6, velero-plugin-for-aws 1.14.1-r1, velero-plugin-for-aws-fips 1.13.2-r1, velero-plugin-for-aws-fips 1.14.2-r1, velero-plugin-for-gcp-fips 1.14.1-r1, victoriametrics-operator 0.69.0-r1, wave 0.11.0-r2, weaviate 1.37.4-r1, weaviate 1.37.6-r1, weaviate-fips 1.36.17-r0, weaviate-fips 1.37.9-r0, weaviate-fips 1.38.1-r0, whereabouts 0.9.2-r2, yunikorn-k8shim 1.5.2-r1

CVE-2026-25681 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...