CVE-2025-25279

Security Advisory MMSA-2025-00430 / CVE-2025-25279 Summary After uploading a file to Mattermost Boards, when the fileId parameter is modified and the board is copied, the file now points to and downloads the target file specified in the parameter. Affected Versions: Mattermost instances with Boar...

CVE-2025-25279-Mattermost-Path-Traversal

🔥 CVE-2025-25279 — Mattermost 10.4.1 📤 Path Traversal in Focalboard allowing file exfiltration 🌟 Presentation This proof of concept demonstrates the exploitation of vulnerability CVE-2025-25279 affecting Mattermost 10.4.1. A flaw in Focalboard the board management module allows arbitrary file...

GO-2026-6608 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

GO-2026-6613 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, nri-postgresql, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

GHSA-2GFW-J3C5-J46W vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, nri-postgresql, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, nri-postgresql, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

GO-2026-6600 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, cloud-provider-vsphere, external-secrets-operator, kafka-proxy, slsa-verifier, secrets-store-csi-driver-provider-aws, gcp-compute-persistent-disk-csi-driver, pgtimetable, cert-manager-cmctl, lvm-driver,...

GHSA-22JX-P735-QCPM vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, cloud-provider-vsphere, external-secrets-operator, kafka-proxy, slsa-verifier, secrets-store-csi-driver-provider-aws, gcp-compute-persistent-disk-csi-driver, pgtimetable, cert-manager-cmctl, lvm-driver,...

GHSA-HQ7W-2XRQ-WP2J vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, nri-postgresql, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

GHSA-874M-FCC5-9GQF vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

GO-2026-6599 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, cloud-provider-vsphere, external-secrets-operator, kafka-proxy, slsa-verifier, secrets-store-csi-driver-provider-aws, gcp-compute-persistent-disk-csi-driver, pgtimetable, cert-manager-cmctl, lvm-driver,...

CVE-2026-97030 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, cloud-provider-vsphere, external-secrets-operator, kafka-proxy, slsa-verifier, secrets-store-csi-driver-provider-aws, gcp-compute-persistent-disk-csi-driver, pgtimetable, cert-manager-cmctl, lvm-driver,...

CVE-2026-94440 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

CVE-2026-97031 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, nri-postgresql, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

CVE-2026-94439 vulnerabilities

Vulnerabilities for packages: hubble-ui, authservice, atlantis, flux-source-controller, nri-postgresql, cloud-provider-vsphere, delve, external-secrets-operator, kafka-proxy, slsa-verifier, newrelic-nri-statsd, aws-node-termination-handler, gcp-compute-persistent-disk-csi-driver,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, crossplane-provider-kubernetes-fips, cloudbeat, external-dns-fips, cloud-sql-proxy-fips, crossplane-provider-azure-eventhub, secrets-store-csi-driver-provider-aws-fips, gitlab-runner-fips, gitness, sftpgo, bank-vaults-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, crossplane-provider-kubernetes-fips, cloudbeat, external-dns-fips, cloud-sql-proxy-fips, crossplane-provider-azure-eventhub, secrets-store-csi-driver-provider-aws-fips, gitlab-runner-fips, gitness, sftpgo, bank-vaults-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, crossplane-provider-kubernetes-fips, cloudbeat, external-dns-fips, cloud-sql-proxy-fips, crossplane-provider-azure-eventhub, secrets-store-csi-driver-provider-aws-fips, gitlab-runner-fips, gitness, sftpgo, bank-vaults-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, crossplane-provider-kubernetes-fips, cloudbeat, external-dns-fips, cloud-sql-proxy-fips, crossplane-provider-azure-eventhub, secrets-store-csi-driver-provider-aws-fips, gitlab-runner-fips, gitness, sftpgo, bank-vaults-fips,...