CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: croc, hubble, dynamic-localpv-provisioner, jaeger-operator, witness, crossplane-provider-azure-authorization, harbor-registry, incert, mongo-tools, buildkitd, kubernetes-dashboard-web, rancher-helm, gomplate, trufflehog, yq, openfga, cluster-api-helm-controller,...

Information Disclosure

github.com/kubernetes/kube-state-metrics is vulnerable to information disclosure. The vulnerability exists as it is possible to cause the entire content of Secrets to show up in the metrics label through kubectl and kube-state-metrics...