Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-1370)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1370 advisory. net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processe...

Important: amazon-ecr-credential-helper

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

Important: amazon-ecr-credential-helper

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2ECS-2025-087 (ALASECS-2025-087)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.11.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-087 advisory. crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2DOCKER-2025-087 (ALASDOCKER-2025-087)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.11.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-087 advisory. crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomai...

Important: amazon-ecr-credential-helper

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

MAL-2025-191719 Malicious code in discordhelper-ecr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in discordhelper-ecr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2DOCKER-2025-079 (ALASDOCKER-2025-079)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-079 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted value...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2ECS-2025-078 (ALASECS-2025-078)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-078 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values...

Important: amazon-ecr-credential-helper

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

Important: amazon-ecr-credential-helper

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: ferretdb, newrelic-nri-statsd, kubernetes-dashboard-metrics-scraper, litefs, sbom-scorecard, nats, boring-registry, pvc-autoresizer, sbom-convert, spiffe-helper, kind, direnv, kubernetes-csi-external-health-monitor, redka, local-path-provisioner, kubelet-csr-approver...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: nats, slsa-verifier, go-tools, nfs-subdir-external-provisioner, gotestsum, aws-s3-controller, skopeo, certificate-transparency, iptables-wrappers, jitsucom-bulker, terraform-provider-azuread, shfmt, kubernetes-csi-driver-nfs, fulcio, rancher-system-agent,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: ferretdb, newrelic-nri-statsd, kubernetes-dashboard-metrics-scraper, litefs, sbom-scorecard, nats, boring-registry, pvc-autoresizer, sbom-convert, spiffe-helper, kind, direnv, kubernetes-csi-external-health-monitor, redka, local-path-provisioner, kubelet-csr-approver...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: ferretdb, newrelic-nri-statsd, kubernetes-dashboard-metrics-scraper, litefs, sbom-scorecard, nats, boring-registry, pvc-autoresizer, sbom-convert, spiffe-helper, kind, direnv, kubernetes-csi-external-health-monitor, redka, local-path-provisioner, kubelet-csr-approver...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: ferretdb, newrelic-nri-statsd, kubernetes-dashboard-metrics-scraper, litefs, sbom-scorecard, nats, boring-registry, pvc-autoresizer, sbom-convert, spiffe-helper, kind, direnv, kubernetes-csi-external-health-monitor, redka, local-path-provisioner, kubelet-csr-approver...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: ferretdb, newrelic-nri-statsd, kubernetes-dashboard-metrics-scraper, litefs, sbom-scorecard, nats, boring-registry, pvc-autoresizer, sbom-convert, spiffe-helper, kind, direnv, kubernetes-csi-external-health-monitor, redka, local-path-provisioner, kubelet-csr-approver...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: ferretdb, newrelic-nri-statsd, kubernetes-dashboard-metrics-scraper, litefs, sbom-scorecard, nats, boring-registry, pvc-autoresizer, sbom-convert, spiffe-helper, kind, direnv, kubernetes-csi-external-health-monitor, redka, local-path-provisioner, kubelet-csr-approver...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: ferretdb, newrelic-nri-statsd, kubernetes-dashboard-metrics-scraper, litefs, sbom-scorecard, nats, boring-registry, pvc-autoresizer, sbom-convert, spiffe-helper, kind, direnv, kubernetes-csi-external-health-monitor, redka, local-path-provisioner, kubelet-csr-approver...