GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, vault-secrets-webhook, cloud-sql-proxy, vault-env, delve, rancher-telemetry, mongodb-kubernetes-operator, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, falco-no-driver, oauth2-proxy, minio-object-browser, incert,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, vault-secrets-webhook, cloud-sql-proxy, vault-env, delve, rancher-telemetry, mongodb-kubernetes-operator, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, falco-no-driver, oauth2-proxy, minio-object-browser, incert,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, vault-secrets-webhook, cloud-sql-proxy, vault-env, delve, rancher-telemetry, mongodb-kubernetes-operator, gcsfuse, kubernetes-event-exporter, falco-no-driver, oauth2-proxy, minio-object-browser, incert, wazero, terraform-provider-tls,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, vault-secrets-webhook, cloud-sql-proxy, vault-env, delve, rancher-telemetry, mongodb-kubernetes-operator, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, falco-no-driver, oauth2-proxy, minio-object-browser, incert,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, vault-secrets-webhook, cloud-sql-proxy, vault-env, delve, rancher-telemetry, mongodb-kubernetes-operator, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, falco-no-driver, oauth2-proxy, minio-object-browser, incert,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, vault-secrets-webhook, cloud-sql-proxy, vault-env, delve, rancher-telemetry, mongodb-kubernetes-operator, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, falco-no-driver, oauth2-proxy, minio-object-browser, incert,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, vault-secrets-webhook, cloud-sql-proxy, vault-env, delve, rancher-telemetry, mongodb-kubernetes-operator, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, falco-no-driver, oauth2-proxy, minio-object-browser, incert,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, crossplane-provider-terraform-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, protoc-gen-go, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips, promxy-fips, velero-fips, wave-fips,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, crossplane-provider-terraform-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, protoc-gen-go, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips, promxy-fips, velero-fips, wave-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, crossplane-provider-terraform-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, protoc-gen-go, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips, promxy-fips, velero-fips, wave-fips,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, crossplane-provider-terraform-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, protoc-gen-go, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips, promxy-fips, velero-fips, wave-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, crossplane-provider-terraform-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, protoc-gen-go, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips, promxy-fips, velero-fips, wave-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, crossplane-provider-terraform-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, protoc-gen-go, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips, promxy-fips, velero-fips, wave-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, crossplane-provider-terraform-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, protoc-gen-go, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips, promxy-fips, velero-fips, wave-fips,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, crossplane-provider-terraform-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, protoc-gen-go, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips, promxy-fips, velero-fips, wave-fips,...

Security update for git-bug (moderate)

openSUSE Security Update: Security update for git-bug Announcement ID: openSUSE-SU-2025:0417-1 Rating: moderate References: 1251463 1251664 Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

Security update for git-bug (moderate)

openSUSE Security Update: Security update for git-bug Announcement ID: openSUSE-SU-2025:0418-1 Rating: moderate References: 1251463 1251664 Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

CVE-2025-64112

Statmatic is a Laravel and Git powered content management system CMS. Stored XSS vulnerabilities in Collections and Taxonomies allow authenticated users with content creation permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. This vulnerability is fix...

CVE-2025-62726

n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use ...

CVE-2025-62726

n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use ...