181 matches found
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: karpenter-fips, terraform-provider-tls-fips, configmap-reload-fips, newrelic-nri-statsd, vault-k8s, blob-csi-fips, prometheus-beat-exporter-fips, nvidia-nsight-compute-12.8, dagdotdev, rancher-machine, nats, secrets-store-csi-driver-fips, eks-distro-fips,...
weblogic-monitoring-exporter
This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...
Important: Red Hat Security Advisory: VolSync v0.12 security fixes and container updates
VolSync v0.12 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2024-31216
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
CVE-2025-24375 MySQL K8s charm could leak credentials for root-level user `serverconfig`
Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...
Important: Red Hat Security Advisory: VolSync 0.12.1 security fixes and enhancements for RHEL 9
VolSync v0.12 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2024-45041
External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets resources. It...
Important: Red Hat Security Advisory: VolSync 0.10.2 for RHEL 9
VolSync v0.10.2 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Important: Red Hat Security Advisory: VolSync 0.11.1 for RHEL 9
VolSync v0.11.1 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2024-31216
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
Moderate: Red Hat Security Advisory: VolSync 0.9.1 security fixes and enhancements
VolSync v0.9.1 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, gitsign, go-licenses, goreleaser, bom, gitness, scorecard, src-fingerprint, nuclei...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: src-fingerprint, scorecard, gitness, bom, pulumi-kubernetes-operator, goreleaser, nuclei, gitsign, go-licenses...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: src-fingerprint, scorecard, gitness, bom, pulumi-kubernetes-operator, goreleaser, nuclei, gitsign, go-licenses...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, gitsign, go-licenses, goreleaser, bom, gitness, scorecard, src-fingerprint, nuclei...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-aws-rds, tkn, kaniko, crossplane-provider-aws-cloudformation, gitness, cosign-fips, crossplane-provider-aws-eks, crossplane, zot, flux-source-controller, crossplane-provider-aws-kinesis, gitsign, gomplate,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: argo-events, argo-events-fips, task, melange, snyk-cli, pulumi-kubernetes-operator, flux-notification-controller, argo-workflows...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, snyk-cli, melange, argo-events, argo-workflows, flux-notification-controller, task...