1852 matches found
CVE-2025-47907 vulnerabilities
Vulnerabilities for packages: victoriametrics-cluster, velero, terraform-provider-azapi, lazygit, containerd, rook, hubble, grpcurl, fixuid, licenseclassifier, trino, spegel, cargobump, gitness, db-operator, kube-logging-operator-custom-runner, falco-exporter, dask-gateway, trivy,...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: victoriametrics-cluster, velero, terraform-provider-azapi, lazygit, containerd, rook, hubble, grpcurl, fixuid, licenseclassifier, trino, spegel, cargobump, gitness, db-operator, kube-logging-operator-custom-runner, falco-exporter, dask-gateway, trivy,...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: stakater-reloader-fips, aws-otel-collector-fips, rancher-loglevel, logstash-exporter, kubevela-fips, splunk-otel-collector-fips, azuredisk-csi-fips, cephcsi-fips, cluster-api-azure-controller, fuse-overlayfs-snapshotter, sigstore-scaffolding, trillian-fips, chainctl,...
SUSE-SU-2025:20516-1 Security update for helm
This update for helm fixes the following issues: Update to version 3.18.4 bsc1246152, CVE-2025-53547: Disabling linter due to unknown issue f20a4ad Matt Farina builddeps: bump the k8s-io group with 7 updates 563b094 dependabotbot Updating link handling 00de613 Matt Farina Update to version 3.18.3...
Security update for helm
This update for helm fixes the following issues: Update to version 3.18.4 bsc1246152, CVE-2025-53547: Disabling linter due to unknown issue f20a4ad Matt Farina builddeps: bump the k8s-io group with 7 updates 563b094 dependabotbot Updating link handling 00de613 Matt Farina Update to version 3.18.3...
CVE-2025-41240
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
CVE-2025-41240
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
CVE-2025-41240
CVE-2025-41240 involves Bitnami Helm charts mounting Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) inside the web server document root. Affected deployments using the default usePasswordFiles=true may expose secrets via HTTP/S when the application is externally accessible, ...
CVE-2025-41240
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
CVE-2025-41240 Mounted Kubernetes Secrets under a predictable path located within the web server document root
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
CVE-2025-41240 Mounted Kubernetes Secrets under a predictable path located within the web server document root
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
CVE-2025-41240: Files or Directories Accessible to External Parties
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...
Rucio Helm Charts 安全漏洞
Rucio Helm Charts is an open source library for Rucio by rucio. A security vulnerability exists in Rucio Helm Charts that stems from a predictable Kubernetes Secrets mount path that could lead to unauthorized access to sensitive credentials...
Maintenance update for Multi-Linux Manager 4.3: Server, Proxy and Retail Branch Server
Description: This update fixes the following issues: mgr-daemon: Version 4.3.12-0: Updated translation strings proxy-helm: Version 4.3.17: Chart rebuilt to the newest version with updated dependencies for SUSE Manager 4.3.16 proxy-httpd-image: Version 4.3.18: Image rebuilt to the newest version...
GO-2025-3802 Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm
Helm vulnerable to Code Injection through malicious chart.yaml content in helm.sh/helm...
CVE-2025-54064 rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. The common Rucio helm-charts for the rucio-server, rucio-ui, and rucio-webui define the log format for the apache access log of these components...
Rucio Helm Charts 日志信息泄露漏洞
Rucio Helm Charts is a library for Rucio in the rucio open source. Rucio Helm Charts suffers from a log message disclosure vulnerability that stems from logging X-Rucio-Auth-Token, which could lead to credential disclosure...
CBL Mariner 2.0 Security Update: helm (CVE-2025-53547)
The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53547 advisory. - Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file alon...
