GO-2026-5039 vulnerabilities

Vulnerabilities for packages: spark-operator, tetragon, victoriametrics-cluster, opa, spire-server, docker-cli-buildx, grafana-mimir, harbor, external-secrets-operator, kbld, paranoia, envconsul, addon-resizer, buildah, flux-image-reflector-controller, pulumi-kubernetes-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: spark-operator, tetragon, spegel, aws-signer-notation-plugin, ip-masq-agent, spire-server, pgtimetable, wgcf, paranoia, kbld, go-licenses, rancher-machine, doppler-kubernetes-operator, kubernetes-dashboard, terraform-provider-pagerduty, bom, rancher-system-agent,...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

EUVD-2025-203480

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758 Initialization of a Resource with an Insecure Default in YAOOK

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

CVE-2025-14758: Initialization of a Resource with an Insecure Default

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: spark-operator, spire-server, k8sgpt-operator, pgtimetable, go-licenses, karma, temporal-server, mods, gke-gcloud-auth-plugin, openbao, falco-exporter, telegraf, harbor-registry, kiali, grafana-operator, nvidia-container-toolkit, mockery, nri-nginx, rclone,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: azure-service-operator-fips, polaris, elvish, sqlexporter, conftest-fips, argo-cd, cluster-api-ipam-provider-in-cluster, kaf, opentelemetry-collector, kubeflow-katib, postgres-operator-fips, s5cmd, nerdctl-fips, trust-manager-fips, cephcsi-fips, nri-memcached,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: conftest-fips, vault-k8s, kubeflow-fips, secrets-store-csi-driver, kaf, kubeflow-katib, prometheus-pushgateway, kots, crossplane-provider-family-azure, aws-flb-kinesis-fips, rclone, temporal, cosign-fips, secrets-store-csi-driver-provider-azure,...