GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sops, aws-efs-csi-driver, rekor, rook, kaniko, spqr, opa, temporal-ui-server, gogatekeeper, crossplane-provider-aws-lambda, delve, addon-resizer, polaris, trino, nri-mssql, kuma, argo-cd, newrelic-nri-kube-events, cloud-provider-azure, helm, dgraph,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: sops, spqr, tfsec, temporal-ui-server, gogatekeeper, crossplane-provider-aws-lambda, neuvector-sigstore-interface, local-static-provisioner, spire-controller-manager, terraform, flux-notification-controller, kuma, helm-set-status, kustomize, helm,...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

EUVD-2025-203480

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: nfpm, rekor, sqlexporter, nri-kafka, opa, opentelemetry-collector, nri-mssql, newrelic-nri-kube-events, metrics-server, glab, rabbitmq-messaging-topology-operator, op-geth, terraform-provider-azurerm, docker-credential-acr-env, aws-nuke, argocd-image-updater,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubescape-operator, flux-helm-controller-fips, kiali, cert-manager-cmctl-fips, neuvector-scanner-fips, sftpgo-plugin-eventstore, nerdctl-fips, gitness, dex, kaf, kubeflow-katib, trino, cluster-api-azure-controller, db-operator-fips, nri-discovery-kubernetes,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter, crossplane-provider-aws-dynamodb, gitness, dex, kaf, kubeflow-katib, nri-discovery-kubernetes, hugo, nfs-subdir-external-provisioner-fips, sigstore-scaffolding-fips, spark-operator, prometheus-redis-exporter, rqlite, k8sgpt-operator,...