GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, k3s, restic, wgcf, petname, opentofu, azcopy, swagger, hydra, step, custom-pod-autoscaler, linkerd2-proxy-init, cargobump, crossplane-provider-aws-ec2, timescaledb-parallel-copy, kubernetes-csi-external-provisioner, git-lfs,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: gitleaks, docker-machine-driver-linode, lvm-driver, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudfront, spire-server, xeol, kubeflow-pipelines, k3s, restic, wgcf, sriov-network-device-plugin, grafana-operator, kubernetes-csi-external-attacher,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, k3s, restic, wgcf, petname, opentofu, azcopy, swagger, hydra, step, custom-pod-autoscaler, linkerd2-proxy-init, cargobump, crossplane-provider-aws-ec2, timescaledb-parallel-copy, kubernetes-csi-external-provisioner, git-lfs,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: gitleaks, docker-machine-driver-linode, lvm-driver, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudfront, spire-server, xeol, kubeflow-pipelines, k3s, restic, wgcf, sriov-network-device-plugin, grafana-operator, kubernetes-csi-external-attacher,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: gitleaks, docker-machine-driver-linode, lvm-driver, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudfront, spire-server, xeol, kubeflow-pipelines, k3s, restic, wgcf, sriov-network-device-plugin, grafana-operator, kubernetes-csi-external-attacher,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, git-lfs, azurefile-csi-fips, knative-operator-fips, nri-f5, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck, step-fips, gitlab-runner, prometheus-pgbouncer-exporter-fips, ytt, opensearch-k8s-operator-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: helm-operator-fips, git-lfs, azurefile-csi-fips, knative-operator-fips, nri-f5, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck, step-fips, gitlab-runner, prometheus-pgbouncer-exporter-fips, ytt, opensearch-k8s-operator-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: mockgen, helm-operator-fips, git-lfs, azurefile-csi-fips, confluent-cp-docker-utils, knative-operator-fips, nri-f5, docker-fips, kubernetes-release, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck, step-fips, gitlab-runner,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: mockgen, helm-operator-fips, git-lfs, azurefile-csi-fips, confluent-cp-docker-utils, knative-operator-fips, nri-f5, docker-fips, kubernetes-release, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck, step-fips, gitlab-runner,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: mockgen, helm-operator-fips, git-lfs, azurefile-csi-fips, confluent-cp-docker-utils, knative-operator-fips, nri-f5, docker-fips, kubernetes-release, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck, step-fips, gitlab-runner,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: mockgen, helm-operator-fips, git-lfs, azurefile-csi-fips, confluent-cp-docker-utils, knative-operator-fips, nri-f5, docker-fips, kubernetes-release, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck, step-fips, gitlab-runner,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, kiali-fips, knative-operator-fips, mockery, nri-apache, nri-f5, apache-exporter, govulncheck, nats, prometheus-pgbouncer-exporter-fips, gitlab-cng, ingress-nginx-controller-fips, kafkaexporter-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: opa, k3s, restic, flux-image-reflector-controller, petname, opentofu, op-geth, hydra, terraform-provider-azurerm, dive, tailscale, kargo, prometheus-operator, rootlesskit, nodetaint, custom-pod-autoscaler, hugo, prometheus-adapter, kubernetes-csi-external-provisioner...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, azurefile-csi-fips, kube-logging-operator-custom-runner-fips, mattmoor-chainit, yace-fips, nats, stakater-reloader, etcd-fips, nvidia-nsight-compute-13.1, lvm-driver, vault-benchmark, addon-resizer, sftpgo-plugin-geoipfilter, confluent-common-docker, gitsign...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, azurefile-csi-fips, aws-node-termination-handler, atlantis, kubewatch, docker-fips, kubernetes-release, apache-exporter, step-fips, ytt, gitlab-cng, cloudnative-pg, gosu, slsa-verifier, cloud-provider-azure-fips, overmind,...

Moderate: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.4

Logging for Red Hat OpenShift - 6.2.4 Red Hat OpenShift Logging 6.2.4 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...