EUVD-2024-46057

Malicious code in bioql PyPI...

EUVD-2022-5730

Malicious code in bioql PyPI...

EUVD-2024-54941

Malicious code in bioql PyPI...

EUVD-2022-5856

Malicious code in bioql PyPI...

EUVD-2022-7524

Malicious code in bioql PyPI...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to helm ( CVE-2025-32386, CVE-2025-32387 )

Summary Helm is used by IBM Cloud Pak for Data to build binaries in cpd-cli. Vulnerability Details CVEID:CVE-2025-32386 DESCRIPTION: Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g.,...

Unauthorized Disclosure Of Sensitive Data

github.com/rancher/fleet is vulnerable to Unauthorized Disclosure of Sensitive Data. The vulnerability is due to improper access control on BundleDeployment resources with GET or LIST permissions, which allows an attacker to retrieve Helm values containing credentials or other secrets...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.58 security and extras update

Red Hat OpenShift Container Platform release 4.15.58 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.57 security and extras update

Red Hat OpenShift Container Platform release 4.14.57 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: k3s, falcoctl, kubernetes-dashboard-web, docker-cli-buildx, grafana-rollout-operator, azure-service-operator, pluto, kpt, kubernetes-dashboard-api, controller-gen, kubernetes-dashboard-auth, nri-nginx, timescaledb-tune, tflint, wait-for-port, grafana-pyroscope,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: k3s, falcoctl, kubernetes-dashboard-web, docker-cli-buildx, grafana-rollout-operator, azure-service-operator, pluto, kpt, kubernetes-dashboard-api, controller-gen, kubernetes-dashboard-auth, nri-nginx, timescaledb-tune, tflint, wait-for-port, grafana-pyroscope,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: lazydocker, cerbos, rancher-system-upgrade-controller, kapp, opa, regclient, argo-events, rancher-agent, gatekeeper, cilium-cli, caddy, mongo-tools, monstache, grafana-pyroscope, nri-mysql, fzf, aws-otel-collector, kubernetes-dashboard-web, rabbitmq-cluster-operator,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.48 security and extras update

Red Hat OpenShift Container Platform release 4.16.48 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.39 security and extras update

Red Hat OpenShift Container Platform release 4.17.39 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

Linux Distros Unpatched Vulnerability : CVE-2019-1010275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed...

GO-2025-3927 Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet...

PT-2025-36650

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet...

ROS-20250908-12

A vulnerability in the code generation library for transferring data between different Mapstruct entities is related to a decoding helper call that outputs the original value of a confidential field. Exploitation of the of the vulnerability could allow an attacker acting remotely to gain access t...

CVE-2025-58366

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...

Linux Distros Unpatched Vulnerability : CVE-2024-52284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unauthorized disclosure of sensitive data: Any user with GET or LIST permissions on BundleDeployment resources could retrieve Helm values containing credentials...