83 matches found
EUVD-2026-60256
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
GO-2025-4013 vulnerabilities
Vulnerabilities for packages: mountpoint-s3-csi-driver, dockerize, local-path-provisioner-fips, configmap-reload-fips, kube-conformance, cert-exporter-fips, cluster-proportional-autoscaler, harbor-scanner-trivy-fips, aws-s3-controller, cert-manager-webhook-pdns, cloud-provider-azure-fips,...
GO-2025-4009 vulnerabilities
Vulnerabilities for packages: mountpoint-s3-csi-driver, dockerize, local-path-provisioner-fips, configmap-reload-fips, kube-conformance, cert-exporter-fips, cluster-proportional-autoscaler, harbor-scanner-trivy-fips, aws-s3-controller, cert-manager-webhook-pdns, cloud-provider-azure-fips,...
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were published to RubyGems with the end goal of serving additional payloads. The rogue gems are listed below - gitcredentialmanager versions 2.8.0...
Medium: amazon-ssm-agent
Issue Overview: go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. This issue has been patched in versions 5.18.0...
Ubuntu 16.04 LTS / 18.04 LTS : Git vulnerabilities (USN-7964-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7964-1 advisory. It was discovered that Git did not properly sanitize URLs when asking for credentials via a terminal prompt. An attacker could possibly use...
USN-7964-1 git vulnerabilities
It was discovered that Git did not properly sanitize URLs when asking for credentials via a terminal prompt. An attacker could possibly use this issue to trick a user into disclosing their password. CVE-2024-50349 It was discovered that Git did not properly handle carriage return characters in it...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: pgpool2exporter, xcaddy, cloud-provider-vsphere, kube-logging-operator-custom-runner, contour, velero, ip-masq-agent, docker-credential-ecr-login, amass, wave, kubernetes-csi-driver-hostpath, slsa-verifier, vt-cli, s5cmd, dynamic-localpv-provisioner, delve,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, pgpool2exporter, kafkaexporter, dagdotdev, xcaddy, docker-machine-driver-linode, gcsfuse, oauth2-proxy, cloud-provider-vsphere, sigstore-scaffolding, sonobuoy, kube-logging-operator-custom-runner, contour, gostatsd, elvis...