CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

EUVD-2025-203480

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: guac, go-licenses, nats-server, gitsign, spire-server, ipfs-cluster, oras, kube-rbac-proxy, helm-set-status, opentelemetry-operator, cis-operator, kubernetes-dashboard, s5cmd, nri-jmx, kratos, sealed-secrets, govulncheck, goreleaser, kpt, podinfo, podman,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, malcontent, rancher-loglevel, timestamp-authority-fips, helm-push, cluster-api-ipam-provider-in-cluster, consul-fips, cerbos, peerdb-flow, gatus, pulumi-language-java, mattermost, falco-exporter-fips, portieris, bazelisk, grpc-health-probe,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, timestamp-authority-fips, helm-push, aws-efs-csi-driver-fips, pulumi-language-java, envoy-ratelimit-fips, grpc-health-probe, kubevela, kor, kuberay-operator, crossplane-provider-aws-kms, timoni, minio, hugo-extended, thanos-operator,...