GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow, kube-bench, gatus, metrics-server, tekton-chains, tekton-pipelines, tetragon, xeol, litefs, kots, nri-discovery-kubernetes, newrelic-nri-statsd, prometheus, terraform-provider-azurerm, kubescape-operator, q, cri-tools, neuvector-dbgen,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow, kube-bench, gatus, minio-object-browser, kubernetes-csi-external-attacher, tetragon, xeol, litefs, verticadb-operator, redis-operator, helm-operator, newrelic-nri-statsd, spegel, scorecard, kubescape-operator, cri-tools,...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

EUVD-2025-203480

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758: Initialization of a Resource with an Insecure Default

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: tekton-chains, redis-operator, helm-operator, newrelic-nri-statsd, neuvector-dbgen, kafka-proxy, terraform-provider-random, minio-operator, pguser, hugo, kubernetes-csi-livenessprobe, headlamp, rabbitmq-messaging-topology-operator, hcloud, nri-mysql, influx, portieri...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in newrelic-infra-operator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, cortex-fips, grpcurl, kube-metrics-adapter, aws-node-termination-handler-fips, configmap-reload, overmind, crossplane-provider-sql, tigera-operator, prometheus, secrets-store-csi-driver-provider-azure-fips, step-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, grpcurl, hugo, configmap-reload, prometheus-beat-exporter, tigera-operator, cosign-fips, caddy, kubeflow-pipelines, flux-kustomize-controller, secrets-store-csi-driver-provider-aws, fulcio, kiam, policy-controller,...