GHSA-G3XR-5W5J-W4Q4 vulnerabilities

Vulnerabilities for packages: external-dns-fips, external-dns...

CVE-2026-50149 vulnerabilities

Vulnerabilities for packages: external-dns-fips, external-dns...

GHSA-G3XR-5W5J-W4Q4 vulnerabilities

Vulnerabilities for packages: external-dns...

CVE-2026-50149 vulnerabilities

Vulnerabilities for packages: external-dns...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitea, coder-fips, argo-cd-fips, snyk-cli, frankenphp-8.2, nemo, kyverno-fips, gitlab-kas, cilium, kubescape, minio-fips, tekton-pipelines, fscrypt, kubescape-server-fips, flux-source-controller, knative-eventing-fips, prometheus-elasticsearch-exporter, traefik-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, witness, apko, scorecard, ko, osv-scanner, kubernetes, pulumi-kubernetes-operator, rancher-machine, istio, age, terraform-provider-azurerm, buildkitd, grype, flux-kustomize-controller, step-issuer, ksops, kubescape, docker, glab, cosign,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, argo-cd, flux, minio, cert-manager, aactl, gitea, helm, mattermost, fscrypt, osv-scanner, cilium, kubernetes, kubernetes-dashboard, loki, k9s, cilium-cli, istio, containerd, spire-server, zarf, rancher, kine, kots, gitlab-kas, kyverno, kaf,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, argo-cd, flux, minio, cert-manager, aactl, mattermost, helm, buildah, fscrypt, docker-cli-buildx, cilium, kubernetes, kubernetes-dashboard, loki, cilium-cli, istio, containerd, spire-server, rancher, kine, kots, podman, gitlab-kas, kyverno, kaf,...

GHSA-X4MJ-7F9G-29H4 vulnerabilities

Vulnerabilities for packages: k8sgateway-fips, k8sgateway, external-dns-fips, external-dns...

GHSA-X4MJ-7F9G-29H4 vulnerabilities

Vulnerabilities for packages: external-dns, k8sgateway...

CVE-2026-41246 vulnerabilities

Vulnerabilities for packages: external-dns, k8sgateway...

CVE-2026-41246 vulnerabilities

Vulnerabilities for packages: k8sgateway-fips, k8sgateway, external-dns-fips, external-dns...

CLEANSTART-2026-HA09227 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.18.0-r0, 0.18.0-r1

Multiple security vulnerabilities affect the external-dns package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kong-ingress-controller-fips, cert-manager-google-cas-issuer, cluster-api-azure-controller, nemo, kubernetes-dashboard-api-fips, mariadb-operator, sriov-network-device-plugin, aws-fsx-csi-driver, kube-rbac-proxy, apache-exporter, restic, promxy-fips, cass-operator,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: croc, sonobuoy-fips, kong-ingress-controller-fips, cert-manager-google-cas-issuer, cluster-api-azure-controller, k8s-driver-manager, nemo, kubernetes-dashboard-api-fips, mariadb-operator, sriov-network-device-plugin, aws-fsx-csi-driver, kube-rbac-proxy, azure-ipam,...

CLEANSTART-2026-ER42900 ParseAddress function constructs domain-literal address components through repeated string concatenation

Multiple security vulnerabilities affect the external-dns-fips package. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...

CVE-2025-13147 External Service Interaction (DNS)

Server-Side Request Forgery SSRF vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4...

FreeBSD : zeek -- information leak vulnerability (50fd6a75-0587-4987-bef2-bb933cd78ea1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 50fd6a75-0587-4987-bef2-bb933cd78ea1 advisory. Tim Wojtulewicz of Corelight reports: The KRB analyzer can leak information about hosts in analyzed...

SUSE CVE-2025-47282

Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user...

GO-2025-3697 Gardener External DNS Management allows malicious google credential in DNS secret to lead to privilege escalation in github.com/gardener/external-dns-management

Gardener External DNS Management allows malicious google credential in DNS secret to lead to privilege escalation in github.com/gardener/external-dns-management...