GO-2026-5039 vulnerabilities

Vulnerabilities for packages: telegraf, crossplane-provider-aws-sqs, descheduler, crossplane-provider-azure-authorization, crossplane-provider-aws-ec2, k3s, cert-manager, kubernetes, flux-image-reflector-controller, opa-envoy, tofu-controller, container-object-storage-interface, spicedb-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: rancher-machine, telegraf, descheduler, hydra, rancher-loglevel, crossplane-provider-aws-ec2, k3s, spire-controller-manager, mesosphere-vsphere-csi, gptscript, pguser, kserve-modelmesh-serving, mods, tofu-controller, container-object-storage-interface,...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

EUVD-2025-203480

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: falco-exporter, kubernetes, nri-mysql, actions-runner-controller, k8ssandra-operator, nri-elasticsearch, grafana-agent-operator, grafana-operator, terraform-provider-google, kube-logging-operator-custom-runner, nri-apache, rclone, pdfcpu, nuclei, go-jsonnet, kine,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: beats-fips, spegel, step-issuer, aws-network-policy-agent, wavefront-collector-for-kubernetes, openfga, xeol, mc, aws-load-balancer-controller, dapr-fips, nvidia-container-toolkit, rclone, conjur-cli, kubewatch, nfs-subdir-external-provisioner, http-echo,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, mc, aws-load-balancer-controller, rclone, envoy-ratelimit, kubewatch, nfs-subdir-external-provisioner, restic, boring-registry, prometheus-alertmanager-fips, secrets-store-csi-driver, kubernetes-dashboard-metrics-scraper,...