omni 信息泄露漏洞

omni is a Kubernetes deployment tool open-sourced by Sidero Labs, Inc. An information disclosure vulnerability exists in omni versions prior to 1.1.5 and prior to 1.0.2, which stems from an API that may disclose sensitive information...

PT-2025-41806

Name of the Vulnerable Software and Affected Versions Omni versions prior to 1.1.5 Omni versions prior to 1.0.2 Description Omni, a platform for managing Kubernetes, may disclose sensitive information through an API endpoint in affected versions. The platform operates on bare metal, virtual...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: frp, kyverno-policy-reporter-ui, traefik, k8sgateway, caddy, kubernetes-dns-node-cache, k3s, ipfs-cluster, kubo, q, spegel, kargo, dkron...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: frp, kyverno-policy-reporter-ui, traefik, k8sgateway, caddy, kubernetes-dns-node-cache, k3s, ipfs-cluster, kubo, q, spegel, kargo, dkron...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: traefik-fips, spegel-fips, kubo-fips, kubo, dkron, eks-distro-fips, frp, k3s, caddy, syncthing-fips, kyverno-policy-reporter-ui-fips, ipfs-cluster, kargo, traefik, caddy-fips, kyverno-policy-reporter-ui, q, coredns, eks-distro, k8sgateway-fips,...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: traefik-fips, spegel-fips, kubo-fips, kubo, dkron, eks-distro-fips, frp, k3s, caddy, syncthing-fips, kyverno-policy-reporter-ui-fips, ipfs-cluster, kargo, traefik, caddy-fips, kyverno-policy-reporter-ui, q, coredns, eks-distro, k8sgateway-fips,...

[SECURITY] Fedora 41 Update: cri-o1.33-1.33.5-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 41 Update: cri-o1.32-1.32.9-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 41 Update: cri-o1.34-1.34.1-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 41 Update: cri-o1.31-1.31.13-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 42 Update: cri-o1.31-1.31.13-1.fc42

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 42 Update: cri-o1.32-1.32.9-1.fc42

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 42 Update: cri-o1.33-1.33.5-1.fc42

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 42 Update: cri-o1.34-1.34.1-1.fc42

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

podman security update

An update is available for podman. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...

Linode Kubernetes Engine Optimization: Save on Compute, Storage, and Networking

...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

Incomplete Filtering of Special Elements

Overview Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements in the config-snippets feature flag. An attacker can access sensitive environment variables, including the Kubernetes service account token secret, by injecting arbitrary HAProxy directives. Note...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...