GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kbld, src-fingerprint, litefs, kubernetes-csi-livenessprobe, lazydocker, aws-nuke, cloud-provider-aws, dapr, flux, tekton-pipelines, kaniko, kubeflow, terraform-provider-grafana, omnibump, glab, kubernetes-csi-external-provisioner, jitsucom-bulker, pinact, emissary,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kbld, kuberlr, src-fingerprint, litefs, rancher-machine, kubernetes-csi-livenessprobe, clickhouse-operator, nginx-prometheus-exporter, juicefs, cloud-provider-aws, nri-postgresql, kubeflow, kubernetes-csi-external-provisioner, rancher-telemetry,...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

EUVD-2025-203480

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758: Initialization of a Resource with an Insecure Default

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: kbld, rootlesskit, petname, grype, nri-postgresql, glab, kserve, timestamp-authority, newrelic-prometheus-configurator, gitlab-pages, terraform-docs, portieris, sftpgo-plugin-kms, rancher-helm, glow, minio-object-browser, tofu-controller, newrelic-infra-operator,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in newrelic-infra-operator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, aws-flb-firehose-fips, kyverno-fips, longhorn-instance-manager, mkcert, skaffold, victoriametrics-operator, aws-load-balancer-controller-fips, kube-bench-fips, kubernetes-csi-external-snapshotter, aws-flb-firehose, trufflehog, sqlexporter, kubebuilde...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: skaffold, aws-load-balancer-controller-fips, kube-bench-fips, stakater-reloader, terraform-provider-google, secrets-store-csi-driver-provider-gcp, flux-image-automation-controller, configmap-reload-fips, helm-push, kiam, argo-workflows, azure-aad-pod-identity-mic,...