1516 matches found
AZL-76872 CVE-2025-47911 affecting package helm for versions less than 3.14.2-10
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
GHSA-G9Q4-QJX4-2V7Q vulnerabilities
Vulnerabilities for packages: cosign, spire-server, aactl, thanos-operator, kine, croc, scorecard, dask-gateway, eksctl, helm-operator, kubernetes-dashboard, aws-flb-kinesis, nerdctl, osv-scanner, redis-operator, src, cert-manager-cmctl, terraform-provider-pagerduty, steampipe, falco-no-driver,...
CVE-2025-61728 vulnerabilities
Vulnerabilities for packages: cosign, spire-server, aactl, thanos-operator, kine, croc, scorecard, dask-gateway, eksctl, helm-operator, kubernetes-dashboard, aws-flb-kinesis, nerdctl, osv-scanner, redis-operator, src, cert-manager-cmctl, terraform-provider-pagerduty, steampipe, falco-no-driver,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: nri-jmx, golangci-lint, kube-bench, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, steampipe, cert-manager-istio-csr, crossplane-provider-aws-cloudfront, k3s, ksops, pguser, nri-couchbase, crossplane-provider-sql,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: nri-jmx, golangci-lint, kube-bench, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, steampipe, cert-manager-istio-csr, crossplane-provider-aws-cloudfront, k3s, ksops, pguser, nri-couchbase, crossplane-provider-sql,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: dockerize, cosign, nri-jmx, golangci-lint, secrets-store-csi-driver, kube-bench, falcosidekick, croc, nri-postgresql, sops, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, dask-gateway, go-licenses, rabbitmq-messaging-topology-operator,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: nri-jmx, golangci-lint, kube-bench, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, steampipe, cert-manager-istio-csr, crossplane-provider-aws-cloudfront, k3s, ksops, pguser, nri-couchbase, crossplane-provider-sql,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: dockerize, cosign, golangci-lint, secrets-store-csi-driver, kube-bench, falcosidekick, croc, nri-postgresql, sops, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, dask-gateway, go-licenses, rabbitmq-messaging-topology-operator, osv-scanner,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: nri-jmx, golangci-lint, kube-bench, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, steampipe, cert-manager-istio-csr, crossplane-provider-aws-cloudfront, k3s, ksops, pguser, nri-couchbase, crossplane-provider-sql,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: dockerize, cosign, nri-jmx, golangci-lint, secrets-store-csi-driver, kube-bench, falcosidekick, croc, nri-postgresql, sops, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, dask-gateway, go-licenses, rabbitmq-messaging-topology-operator,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: dockerize, cosign, golangci-lint, secrets-store-csi-driver, kube-bench, falcosidekick, croc, nri-postgresql, sops, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, dask-gateway, go-licenses, rabbitmq-messaging-topology-operator, osv-scanner,...
CLEANSTART-2026-UR80185 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-FS64938 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-HX78047 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-JR37040 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-TL71584 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-EL98016 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-GS02052 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...