EUVD-2024-1788

Malicious code in bioql PyPI...

EUVD-2024-2861

Malicious code in bioql PyPI...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: dagdotdev, kube-vip, confluent-common-docker, grafana-operator, secrets-store-csi-driver-provider-aws, octo-sts, ctop, kuberay-operator, vault-benchmark, gostatsd, pvc-autoresizer, php-fpmexporter, vault-k8s, linkerd2-proxy-init, lvm-driver,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: dagdotdev, kube-vip, confluent-common-docker, grafana-operator, secrets-store-csi-driver-provider-aws, octo-sts, ctop, kuberay-operator, vault-benchmark, gostatsd, pvc-autoresizer, php-fpmexporter, vault-k8s, linkerd2-proxy-init, lvm-driver,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver-fips, kube-vip-cloud-provider, configmap-reload-fips, nats, checksec, ctop, terraform-provider-time, cloud-provider-aws, knative-eventing, nvidia-nsight-compute-13.0, grafana-operator, confluent-common-docker, consul-fips,...

weblogic-monitoring-exporter

This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...

Important: Red Hat Security Advisory: VolSync v0.12 security fixes and container updates

VolSync v0.12 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2024-31216

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...

CVE-2025-24375 MySQL K8s charm could leak credentials for root-level user `serverconfig`

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

Important: Red Hat Security Advisory: VolSync 0.12.1 security fixes and enhancements for RHEL 9

VolSync v0.12 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2024-45041

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets resources. It...

Important: Red Hat Security Advisory: VolSync 0.10.2 for RHEL 9

VolSync v0.10.2 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: VolSync 0.11.1 for RHEL 9

VolSync v0.11.1 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2024-31216

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...

Moderate: Red Hat Security Advisory: VolSync 0.9.1 security fixes and enhancements

VolSync v0.9.1 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: scorecard, go-licenses, gitsign, bom, pulumi-kubernetes-operator, src-fingerprint, goreleaser, nuclei, gitness...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: bom, pulumi-kubernetes-operator, src-fingerprint, gitsign, scorecard, go-licenses, goreleaser, nuclei, gitness...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: bom, pulumi-kubernetes-operator, src-fingerprint, gitsign, scorecard, go-licenses, goreleaser, nuclei, gitness...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: scorecard, go-licenses, gitsign, bom, pulumi-kubernetes-operator, src-fingerprint, goreleaser, nuclei, gitness...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: tkn, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-sns, flux-image-automation-controller, melange, pulumi, slsa-verifier, crossplane-provider-aws-elasticache, cosign-fips, crossplane-provider-aws-kms, boring-registry, cosign,...