GHSA-6M8W-JC87-6CR7 vulnerabilities

Vulnerabilities for packages: witness, trivy, conftest, spire-server, kyverno-notation-aws, kots, cosign, policy-controller, tfsec...

GHSA-6M8W-JC87-6CR7 vulnerabilities

Vulnerabilities for packages: trivy, trivy-fips, conftest, dapr-fips, policy-controller-fips, witness, conftest-fips, spire-server, kyverno-notation-aws-fips, tfsec, policy-controller, spire-server-fips, kyverno, dapr, cosign-fips, kyverno-fips, cosign, kyverno-notation-aws, kots...

CVE-2024-45551

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45551

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45551 Weak Authentication in HLOS

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

The JAR File Handler component in macOS is vulnerable to a flaw that allows a malicious JAR file to bypass Gatekeeper checks. This security issue was addressed in macOS Ventura 13.7.5 , Sonoma 14.7.5 , and Sequoia 15.4 through improved handling of executable types. Exploitation of this vulnerabil...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

PT-2025-13872

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description The issue allows a malicious JAR file to bypass Gatekeeper checks due to improper handling of executable types. Recommendatio...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sequoia that stems from a malicious JAR file that could bypass Gatekeeper checks...

Important: Red Hat Security Advisory: Gatekeeper v3.15.4

Gatekeeper v3.15.4 Gatekeeper v3.15.4 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...

Important: Red Hat Security Advisory: Gatekeeper v3.18.0

Gatekeeper v3.18.0 Gatekeeper v3.18.0 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: syft, chartmuseum, opa-envoy, melange, k3s, kargo, spegel, linkerd2, grype, helm-push, k8sgpt, nerdctl, wolfictl, k8ssandra-client, cilium-cli, cert-manager-cmctl, helm-operator, dagger, kubevela, trivy, ctop, envoy-gateway, kots, flux-helm-controller, skaffold,...

Important: Red Hat Security Advisory: Gatekeeper v3.17.2

Gatekeeper v3.17.2 Gatekeeper v3.17.2 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: metallb, scorecard, go-licenses, mockery, yq, go-md2man, nuclei, up, gh, petname, hey, grpcurl, grype, dynamic-localpv-provisioner, prometheus-pushgateway, vault-k8s, nri-discovery-kubernetes, helm-operator, newrelic-prometheus-configurator, protoc-gen-go-grpc, shfmt...

Important: Red Hat Security Advisory: Gatekeeper v3.15.3

Gatekeeper v3.15.3 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes subscription. Red Hat Produ...

Important: Red Hat Security Advisory: Gatekeeper v3.17.1

Gatekeeper v3.17.1 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes subscription. Red Hat Produ...