Medium: amazon-ecr-credential-helper

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: amazon-ecr-credential-helper Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to...

Medium: amazon-ecr-credential-helper

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: amazon-ecr-credential-helper Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn...

Medium: amazon-ecr-credential-helper

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: amazon-ecr-credential-helper Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this pa...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kube-vip, newrelic-nri-statsd, kubeflow-katib, nats, linkerd2-proxy-init, pvc-autoresizer, secrets-store-csi-driver-provider-aws, grafana-operator, local-path-provisioner, dagdotdev, octo-sts, cloud-provider-aws, gostatsd, sftpgo-plugin-pubsub, vault-k8s, hivemind,...

MAL-2025-9967 Malicious code in @zalastax/nolb-_ecr (npm)

The package @zalastax/nolb-ecr was found to contain malicious code...

Malicious code in @zalastax/nolb-_ecr (npm)

The package @zalastax/nolb-ecr was found to contain malicious code...

Important: amazon-ecr-credential-helper

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-ecr-credential-helper

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-ecr-credential-helper

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2025-1039)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1039 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASDOCKER-2025-069)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2025-069 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size lin...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2025-065)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2025-065 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid...

Important: amazon-ecr-credential-helper

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

CVE-2021-25776

In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: slsa-verifier, nfs-subdir-external-provisioner, aactl, kube-fluentd-operator, gotestsum, helm-operator, skopeo, caddy, overmind, prometheus, cni-plugins, kubernetes-csi-external-provisioner, shfmt, kubernetes-csi-driver-nfs, fulcio, kafkaexporter,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: slsa-verifier, nfs-subdir-external-provisioner, aactl, kube-fluentd-operator, gotestsum, helm-operator, skopeo, caddy, overmind, prometheus, cni-plugins, kubernetes-csi-external-provisioner, shfmt, kubernetes-csi-driver-nfs, fulcio, kafkaexporter,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, kubernetes-csi-driver-hostpath, opentofu-fips, flux-kustomize-controller-fips, nri-mssql, git-sync-fips, cass-operator, step-issuer, oauth2-proxy-fips, snyk-cli, aws-network-policy-agent, tkn-fips, rabbitmq-messaging-topology-operator,...

Medium: amazon-ecr-credential-helper

Issue Overview: The various Is methods IsPrivate, IsLoopback, etc did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. CVE-2024-24790 Affected Packages: amazon-ecr-credential-helper Issue Correction: Run dn...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2024-047)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.9.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2024-047 advisory. The various Is methods IsPrivate, IsLoopback, etc did not work as expected for IPv4-mapped IPv6...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2024-043)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.9.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2024-043 advisory. The various Is methods IsPrivate, IsLoopback, etc did not work as expected for IPv4-mapped IPv6 addresses,...