CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: fscrypt, sbom-convert, vt-cli, crossplane, whereabouts, oauth2-proxy, dagdotdev, ctop, kubecolor, dockerize, skopeo, mkcert, opentofu, rancher-system-agent, rancher-webhook, docker-credential-ecr-login, envconsul, bom, mockery, ferretdb, kind, petname,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: fscrypt, sbom-convert, vt-cli, crossplane, whereabouts, oauth2-proxy, dagdotdev, ctop, kubecolor, dockerize, skopeo, mkcert, opentofu, rancher-system-agent, rancher-webhook, docker-credential-ecr-login, envconsul, bom, mockery, ferretdb, kind, petname,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: fscrypt, sbom-convert, vt-cli, crossplane, whereabouts, oauth2-proxy, dagdotdev, ctop, kubecolor, dockerize, skopeo, opentofu, rancher-system-agent, rancher-webhook, docker-credential-ecr-login, envconsul, bom, mockery, ferretdb, kind, petname, spicedb-operator,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: fscrypt, sbom-convert, vt-cli, crossplane, whereabouts, oauth2-proxy, dagdotdev, ctop, kubecolor, dockerize, skopeo, mkcert, opentofu, rancher-system-agent, rancher-webhook, docker-credential-ecr-login, envconsul, bom, mockery, ferretdb, kind, petname,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, prometheus-alertmanager-fips, cloud-provider-aws, promxy-fips, cephcsi-fips, terraform-provider-azapi, prometheus-process-exporter-fips, nvidia-nsight-compute-12.8, lvm-driver-fips, kubernetes-event-exporter-fips,...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2DOCKER-2025-077 (ALASDOCKER-2025-077)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2025-077 advisory. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaki...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2ECS-2025-075 (ALASECS-2025-075)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-075 advisory. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2NITRO-ENCLAVES-2025-071 (ALASNITRO-ENCLAVES-2025-071)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2025-071 advisory. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potential...

Medium: amazon-ecr-credential-helper

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: amazon-ecr-credential-helper Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn...

Medium: amazon-ecr-credential-helper

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: amazon-ecr-credential-helper Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to...

Medium: amazon-ecr-credential-helper

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: amazon-ecr-credential-helper Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this pa...