CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: policy-controller, traefik, sqlexporter, git-sync, goreleaser, thanos, sftpgo-plugin-pubsub, ksops, openbao, azcopy, crossplane-provider-azure-authorization, kubernetes, velero-plugin-for-microsoft-azure, ko, mc, harbor-registry, mongo-tools, terragrunt,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-mysql, kustomize, dynamic-localpv-provisioner, gcsfuse, trillian, kuberay-operator, metrics-server, aws-flb-cloudwatch, newrelic-infra-operator, goreleaser, dataplaneapi, thanos, wireguard-go, kube-logging-operator, grafana-operator, ytt, petname, mongo-tools,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-mysql, kustomize, dynamic-localpv-provisioner, gcsfuse, trillian, kuberay-operator, metrics-server, aws-flb-cloudwatch, newrelic-infra-operator, goreleaser, dataplaneapi, thanos, wireguard-go, kube-logging-operator, grafana-operator, ytt, petname, mongo-tools,...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to improper certificate validation. An attacker can intercept secure communications by presenting a forged certificate. Remediation Upgrade github.com/mongodb/mongo-tools/common/db to version 3.6.21,...

Security Bulletin: Multiple vulnerabilities in the mongo-tools utility affect IBM WebSphere Automation

Summary There are multiple vulnerabilities in the mongo-tools utility used in IBM WebSphere Automation. These have been addressed in the remediation section. Vulnerability Details CVEID:CVE-2022-41715 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by the compilation of regula...