CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, k3s, verticadb-operator, vale, aws-otel-collector, grafana-alloy, nats, amazon-cloudwatch-agent, argo-rollouts, opentelemetry-collector, kserve, k8sgpt, kine, tempo, opentelemetry-collector-contrib, k8sgateway, jaeger, kargo, datadog-agent,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, k3s, verticadb-operator, vale, aws-otel-collector, grafana-alloy, nats, amazon-cloudwatch-agent, argo-rollouts, opentelemetry-collector, kserve, k8sgpt, kine, tempo, opentelemetry-collector-contrib, k8sgateway, jaeger, kargo, datadog-agent,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: vale, k8sgateway, coredns-fips, kargo, splunk-otel-collector-fips, nrdot-collector-k8s-fips, opentelemetry-collector-fips, verticadb-operator-fips, grafana-alloy, grafana-alloy-fips, coredns, argo-cd, argo-workflows-fips, aws-otel-collector-fips, keda, kine, k3s,...

CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: vale, k8sgateway, coredns-fips, kargo, splunk-otel-collector-fips, nrdot-collector-k8s-fips, opentelemetry-collector-fips, verticadb-operator-fips, grafana-alloy, grafana-alloy-fips, coredns, argo-cd, argo-workflows-fips, aws-otel-collector-fips, keda, kine, k3s,...

EUVD-2025-11119

Malicious code in bioql PyPI...

WordPress Kargo Theme <= 1.1.13 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Kargo versions = 1.1.13...

WordPress Kargo Theme <= 1.1.13 is vulnerable to Local File Inclusion

Software Kargo Type Theme Vulnerable versions = 1.1.13 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 31c938be3ceb Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: pluto, tw, linkerd2, trivy, helm-docs, flux-source-controller, istio, eksctl, cerbos, helm-push, rancher-fleet, zarf, cluster-api-helm-controller, k8sgpt, k8ssandra-client, cert-manager-cmctl, k9s, helm-operator, flux-helm-controller, chart-testing, chartmuseum, karg...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: pluto, tw, linkerd2, trivy, helm-docs, flux-source-controller, istio, eksctl, cerbos, helm-push, rancher-fleet, zarf, cluster-api-helm-controller, k8sgpt, k8ssandra-client, cert-manager-cmctl, k9s, helm-operator, flux-helm-controller, chart-testing, chartmuseum, karg...

CVE-2025-26908

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gurmehub Kargo Entegratör kargo-entegrator allows SQL Injection.This issue affects Kargo Entegratör: from n/a through = 1.1.14...

CVE-2025-26908

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gurmehub Kargo Entegratör kargo-entegrator allows SQL Injection.This issue affects Kargo Entegratör: from n/a through = 1.1.14...

CVE-2025-26908 WordPress Kargo Entegratör plugin <= 1.1.14 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gurmehub Kargo Entegratör kargo-entegrator allows SQL Injection.This issue affects Kargo Entegratör: from n/a through = 1.1.14...

CVE-2025-26908

CVE-2025-26908 (Kargo Entegratör – WooCommerce Kargo Entegrasyon Eklentisi) authenticates as Shop Manager+ and suffers SQL Injection due to improper neutralization. Affected versions: up to 1.1.14. Red Hat entry confirms the vulnerability and notes a patch has been applied; Wordfence WordPress pl...

CVE-2025-26908 WordPress Kargo Entegratör plugin <= 1.1.14 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gurmehub Kargo Entegratör kargo-entegrator allows SQL Injection.This issue affects Kargo Entegratör: from n/a through = 1.1.14...

WordPress plugin Kargo Entegratör SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection...

WordPress Kargo Entegratör plugin <= 1.1.14 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Kargo Entegratör versions = 1.1.14...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: dagger, buildkitd, kubevela, nerdctl, opa, k3s, kubescape, linkerd2, trivy, flux-source-controller, docker, eksctl, docker-compose, helm-push, neuvector-scanner, wolfictl, osv-scanner, rancher-fleet, zarf, cluster-api-helm-controller, k8sgpt, kaniko, k8ssandra-client...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: goreleaser, dagger, flyte, sftpgo, policy-controller, undock, istio, vault-benchmark, wolfictl, grafana-mimir, flux-kustomize-controller, rabbitmq-messaging-topology-operator, aactl, dagdotdev, rekor, fulcio, minio, argocd-image-updater, harbor-registry, falcoctl,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: goreleaser, dagger, flyte, sftpgo, policy-controller, undock, istio, vault-benchmark, wolfictl, grafana-mimir, flux-kustomize-controller, rabbitmq-messaging-topology-operator, aactl, dagdotdev, rekor, fulcio, minio, argocd-image-updater, harbor-registry, falcoctl,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: zot, conftest-fips, syft, kubescape, kargo, buildkitd, spire-server, melange, tkn, cadvisor, conftest, kaniko, spire-server-fips, wolfictl, cilium-cli, up, aactl, cadvisor-fips, dagger, ko, prometheus, loki, grype, buf, ctop, docker-compose, trivy, crossplane...