CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: k3s, spire-server, terraform-provider-pagerduty, kubernetes-dashboard-api, cosign, dask-gateway, prometheus, kubo, kubeflow-katib, kubernetes-dashboard, nerdctl, opentofu, src, helm-set-status, traefik, cert-manager-cmctl, external-dns, flux-kustomize-controller, val...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: k3s, spire-server, terraform-provider-pagerduty, kubernetes-dashboard-api, cosign, dask-gateway, prometheus, kubo, kubeflow-katib, kubernetes-dashboard, nerdctl, opentofu, src, helm-set-status, traefik, cert-manager-cmctl, external-dns, flux-kustomize-controller, val...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, descheduler, kserve-modelmesh-serving, newrelic-infra-operator, gatekeeper, sftpgo-plugin-auth, grafana-rollout-operator, dkron, cosign, maru, openbao-k8s, kube-vip-cloud-provider, litefs, opentofu, pgpool2exporter,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: descheduler, kserve-modelmesh-serving, sftpgo-plugin-auth, cosign, kube-vip-cloud-provider, kubeflow-pipelines, nginx-prometheus-exporter, chart-testing, gke-gcloud-auth-plugin, crossplane-provider-aws-ec2, go-jsonnet, go-licenses, rancher-telemetry, yace, xeol, tfse...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, descheduler, kserve-modelmesh-serving, newrelic-infra-operator, gatekeeper, sftpgo-plugin-auth, grafana-rollout-operator, dkron, cosign, maru, openbao-k8s, kube-vip-cloud-provider, litefs, opentofu, pgpool2exporter,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: descheduler, kserve-modelmesh-serving, sftpgo-plugin-auth, cosign, kube-vip-cloud-provider, kubeflow-pipelines, nginx-prometheus-exporter, chart-testing, gke-gcloud-auth-plugin, crossplane-provider-aws-ec2, go-jsonnet, go-licenses, rancher-telemetry, yace, xeol, tfse...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, descheduler, kserve-modelmesh-serving, newrelic-infra-operator, gatekeeper, sftpgo-plugin-auth, grafana-rollout-operator, dkron, cosign, maru, openbao-k8s, kube-vip-cloud-provider, litefs, opentofu, pgpool2exporter,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: descheduler, kserve-modelmesh-serving, sftpgo-plugin-auth, cosign, kube-vip-cloud-provider, kubeflow-pipelines, nginx-prometheus-exporter, chart-testing, gke-gcloud-auth-plugin, crossplane-provider-aws-ec2, go-jsonnet, go-licenses, rancher-telemetry, yace, xeol, tfse...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, descheduler, kserve-modelmesh-serving, newrelic-infra-operator, gatekeeper, sftpgo-plugin-auth, grafana-rollout-operator, dkron, cosign, maru, openbao-k8s, kube-vip-cloud-provider, litefs, opentofu, pgpool2exporter,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: descheduler, kserve-modelmesh-serving, sftpgo-plugin-auth, cosign, kube-vip-cloud-provider, kubeflow-pipelines, nginx-prometheus-exporter, chart-testing, gke-gcloud-auth-plugin, crossplane-provider-aws-ec2, go-jsonnet, go-licenses, rancher-telemetry, yace, xeol, tfse...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, doppler-kubernetes-operator, kafka-proxy-fips, pgtimetable-fips, restic, cert-manager-openshift-routes-fips, langfuse, dex, kubernetes-csi-driver-nfs, minio-operator, neuvector-dbgen-fips, yace, longhorn-backing-image-manager-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, doppler-kubernetes-operator, kafka-proxy-fips, pgtimetable-fips, restic, cert-manager-openshift-routes-fips, langfuse, dex, kubernetes-csi-driver-nfs, minio-operator, neuvector-dbgen-fips, yace, longhorn-backing-image-manager-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, doppler-kubernetes-operator, kafka-proxy-fips, pgtimetable-fips, restic, go-md2man, cert-manager-openshift-routes-fips, langfuse, dex, kubernetes-csi-driver-nfs, minio-operator, neuvector-dbgen-fips, yace, longhorn-backing-image-manager-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, doppler-kubernetes-operator, kafka-proxy-fips, pgtimetable-fips, restic, go-md2man, cert-manager-openshift-routes-fips, langfuse, dex, kubernetes-csi-driver-nfs, minio-operator, neuvector-dbgen-fips, yace, longhorn-backing-image-manager-fips,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, doppler-kubernetes-operator, kafka-proxy-fips, pgtimetable-fips, restic, go-md2man, cert-manager-openshift-routes-fips, langfuse, dex, kubernetes-csi-driver-nfs, minio-operator, neuvector-dbgen-fips, yace, longhorn-backing-image-manager-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, doppler-kubernetes-operator, kafka-proxy-fips, pgtimetable-fips, restic, go-md2man, cert-manager-openshift-routes-fips, langfuse, dex, kubernetes-csi-driver-nfs, minio-operator, neuvector-dbgen-fips, yace, longhorn-backing-image-manager-fips,...

CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

CVE-2025-71183

CVE-2025-71183 (Linux kernel, btrfs) : The issue arises during rename exchanges where directories involved may not have their last_unlink_trans updated, causing the log replay path to miss a conflicting inode in the log tree. After a power failure, this can trigger an incorrect deletion attempt o...

EUVD-2025-206592

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...