GO-2026-5039 vulnerabilities

Vulnerabilities for packages: gitlab-runner, terraform-provider-azurerm, gke-gcloud-auth-plugin, kube-state-metrics, chisel, istio, rancher-helm, kyverno-policy-reporter-kyverno-plugin, opa-envoy, k3s, sftpgo-plugin-auth, cri-tools, dbmate, controller-gen, cert-manager-webhook-pdns,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gke-gcloud-auth-plugin, chisel, helm-set-status, boring-registry, kyverno-policy-reporter-kyverno-plugin, aws-privateca-issuer, rancher-helm, ytt, k3s, sbomqs, aws-eks-pod-identity-agent, kserve-modelmesh-serving, cri-tools, dbmate,...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

EUVD-2025-203480

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758: Initialization of a Resource with an Insecure Default

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, boring-registry, aws-privateca-issuer, terraform-provider-random, kube-metrics-adapter, tekton-chains, seaweedfs, rancher-system-agent, tfsec, k8sgpt, newrelic-nri-statsd, nova, ipfs-cluster, hugo-extended, petname, prometheus-alertmanager,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in newrelic-infra-operator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cilium-envoy, loki-fips, chainctl, docker-cli-fips, dynamic-localpv-provisioner, temporal-ui-server-fips, azure-workload-identity-webhook, prometheus-podman-exporter, argocd-image-updater, runc, spegel-fips, kubevela-fips, vault-csi-provider,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, temporal-ui-server-fips, terraform-provider-sendgrid-fips, crossplane, runc, vault-csi-provider, cluster-proportional-autoscaler, prometheus-mysqld-exporter, cloudflared, prometheus-bind-exporter, crossplane-provider-family-azure,...