Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.57 security and extras update

Red Hat OpenShift Container Platform release 4.14.57 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: nri-apache, terraform-mcp-server, controller-gen, wait-for-port, tkn, libnvidia-container, k8sgpt, kapp, ip-masq-agent, k8sgateway, tflint, k3s, kubernetes-dashboard-auth, opa, yunikorn-k8shim, cluster-api-provider-vsphere, rancher-system-agent,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: nri-apache, terraform-mcp-server, controller-gen, wait-for-port, tkn, libnvidia-container, k8sgpt, kapp, ip-masq-agent, k8sgateway, tflint, k3s, kubernetes-dashboard-auth, opa, yunikorn-k8shim, cluster-api-provider-vsphere, rancher-system-agent,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: mongo-tools, cloud-sql-proxy, migrate, kpt, clickhouse-operator, dive, fzf, nri-nginx, aws-otel-collector, gatekeeper, karpenter, ini-file, terraform-provider-azapi, opa, kor, kubecolor, eck-operator, ipfs-cluster, amazon-cloudwatch-agent-operator, nri-apache,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.48 security and extras update

Red Hat OpenShift Container Platform release 4.16.48 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a security impact of...

The vulnerability of the package manager for Kubernetes Helm, related to the use of an uninitialized resource, allows a attacker to cause a service failure.

The vulnerability of the package manager for Kubernetes Helm is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the package manager for Kubernetes Helm, related to the distribution of resources without any restrictions or controls, allows a attacker to cause a service failure.

The vulnerability of the package manager for Kubernetes Helm is related to the distribution of resources without any restrictions or controls. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.39 security and extras update

Red Hat OpenShift Container Platform release 4.17.39 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

Linux Distros Unpatched Vulnerability : CVE-2019-1010275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed...

GO-2025-3927 Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet...

PT-2025-36650

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet...

The vulnerability of the package manager for Kubernetes Helm, related to improper code generation management, allows a attacker to execute arbitrary code.

The vulnerability of the package manager for Kubernetes Helm is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

ROS-20250908-12

A vulnerability in the code generation library for transferring data between different Mapstruct entities is related to a decoding helper call that outputs the original value of a confidential field. Exploitation of the of the vulnerability could allow an attacker acting remotely to gain access t...

CVE-2025-58366

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...

Linux Distros Unpatched Vulnerability : CVE-2024-52284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unauthorized disclosure of sensitive data: Any user with GET or LIST permissions on BundleDeployment resources could retrieve Helm values containing credentials...

CVE-2025-58366

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...

CVE-2025-58366 Onyxia private helm repository credentials are leaked through unauthenticated API

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...

CVE-2025-58366 Onyxia private helm repository credentials are leaked through unauthenticated API

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...

CVE-2025-58366

CVE-2025-58366 affects Onyxia (Onyxia-API) in versions 4.6.0–4.8.0. The vulnerability arises from leaking credentials of private Helm repositories via the unauthenticated public endpoint /public/catalogs, when catalogs配置 include username/password. The issue enables exposure of private repo creden...

CVE-2025-58366 Onyxia private helm repository credentials are leaked through unauthenticated API

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...