Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.8 security update

Red Hat Advanced Cluster Management for Kubernetes 2.13 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. Red Hat Advanced Cluster Management for Kubernetes 2.13 images Red Hat Advanced Cluster Management for Kubernetes provides...

CVE-2026-40564

Files or Directories Accessible to External Parties, Server-Side Request Forgery SSRF vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so that it points to user-owned files or addresses. This lets a user with CR create permissions read files...

Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.3

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.10.3 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.10.3 release that simplify the process of...

Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.17.0

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.17.0 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.17.0 release that simplify the process of...

CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-27136 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-27136 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-42506 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-42506 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-46597 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-46597 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39834 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39834 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39821 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39821 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39827 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39827 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-25681 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-25681 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39829 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39829 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...