GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-mssql, pulumi-kubernetes-operator, crossplane-provider-aws-sns, cert-manager-webhook-pdns, containerd, hubble, prometheus-adapter, crossplane-provider-aws-kinesis, rancher-agent, temporal, crossplane-provider-azure-storage, aactl, helm-push, continuity,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, rancher-telemetry, verticadb-operator, cosign, crossplane-provider-aws-sns, hubble, mesosphere-vsphere-csi, crossplane-provider-aws-kinesis, cloud-provider-vsphere, aactl, kube-vip-cloud-provider, crossplane-provider-sql, kubeflow-pipelines,...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

EUVD-2025-203480

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758: Initialization of a Resource with an Insecure Default

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: nri-mssql, rancher-telemetry, cloud-provider-vsphere, metrics-agent, gitleaks, rekor, kpt, knative-client, newrelic-nri-kube-events, external-dns, stern, spark-operator, polaris, nri-mongodb, glab, juicefs, nri-f5, rancher-fleet, ingress-nginx-controller,...

Malware in newrelic-infra-operator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: net-kourier-fips, cert-manager-csi-driver-fips, kubescape, glab, apache-beam-python-3.11-sdk, mc, prometheus-stackdriver-exporter, temporal, db-operator-fips, consul-k8s, apko, slsa-verifier, k8ssandra-client-fips, spire-server-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubescape, rabbitmq-cluster-operator, mc, prometheus-stackdriver-exporter, temporal, vault-k8s, slsa-verifier, spire-server-fips, spicedb, cloud-sql-proxy-fips, caddy-fips, helm, prometheus-redis-exporter-fips, cass-operator-fips, sigstore-scaffolding, metacontroller...