GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: skopeo-fips, speedtest-go, nvidia-nsight-compute-13.2, kubecolor, azure-ipam, harbor-registry-fips, guac, iptables-wrappers, azuredisk-csi-fips, cfssl, kubeflow-katib, cluster-api, manifest-tool, restic, gitlab-rails-ce, spire-controller-manager-fips, fq,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: skopeo-fips, speedtest-go, nvidia-nsight-compute-13.2, kubecolor, azure-ipam, harbor-registry-fips, guac, iptables-wrappers, azuredisk-csi-fips, cfssl, kubeflow-katib, cluster-api, manifest-tool, restic, gitlab-rails-ce, spire-controller-manager-fips, fq,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: skopeo-fips, speedtest-go, nvidia-nsight-compute-13.2, kubecolor, azure-ipam, harbor-registry-fips, guac, iptables-wrappers, azuredisk-csi-fips, cfssl, kubeflow-katib, cluster-api, manifest-tool, restic, gitlab-rails-ce, spire-controller-manager-fips, fq,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: skopeo-fips, speedtest-go, nvidia-nsight-compute-13.2, kubecolor, azure-ipam, harbor-registry-fips, guac, iptables-wrappers, azuredisk-csi-fips, cfssl, kubeflow-katib, cluster-api, manifest-tool, restic, gitlab-rails-ce, spire-controller-manager-fips, fq,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: skopeo-fips, speedtest-go, nvidia-nsight-compute-13.2, kubecolor, azure-ipam, harbor-registry-fips, guac, iptables-wrappers, azuredisk-csi-fips, cfssl, kubeflow-katib, cluster-api, manifest-tool, restic, gitlab-rails-ce, spire-controller-manager-fips, fq,...

EUVD-2007-4209

Malware in sbrugna...

MAL-2025-42127 Malicious code in azure-ipam-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44b5c0e4141f25b2fb25c0fcd206aa203961a4a13336461bab2825b51576f88d The OpenSSF Package Analysis project identified 'azure-ipam-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in azure-ipam-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44b5c0e4141f25b2fb25c0fcd206aa203961a4a13336461bab2825b51576f88d The OpenSSF Package Analysis project identified 'azure-ipam-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-fips, skopeo-fips, gatus, newrelic-fluent-bit-output, nvidia-nsight-compute-13.2, kubernetes-csi-external-provisioner, kubecolor, neuvector-scanner-fips, azure-ipam, amazon-k8s-cni, guac, azuredisk-csi-fips, cfssl, apache-beam-python-3.11-sdk,...

CVE-2025-30162: Incorrect Authorization

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who use Gateway API for Ingress for some services and use LB-IPAM or BGP for LB Service implementation and use network policies to block egress traffic from workloads in a namespace to...

CVE-2024-21638

Azure IPAM IP Address Management is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as the Service Principal used is only assign...

Privilege escalation

Azure IPAM IP Address Management is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as the Service Principal used is only assign...

CVE-2024-21638

Azure IPAM (IP Address Management) suffers an elevation-of-privilege vulnerability (CVE-2024-21638) due to missing validation of the incoming authentication token, allowing impersonation of privileged users to access stored data. Affected component is the Azure IPAM solution running on Azure; the...