GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tempo, cni-plugins, tflint, trivy, lazydocker, cloud-provider-gcp-cloud-controller-manager, ratify, cluster-api-azure-controller, nri-f5, zot, nri-nginx, kapp, ipfs-cluster, k3d, kube-bench, kubernetes-csi-driver-nfs, mockgen, nginx-prometheus-exporter,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: tempo, kargo, flyte, terragrunt, vexctl, op-geth, sftpgo-plugin-pubsub, trivy, azcopy, thanos, sigstore-scaffolding, kubernetes, sqlexporter, weaviate, traefik, sftpgo-plugin-kms, zot, argo-workflows, rook, kubescape, flux-image-automation-controller, gitness, glab,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, secrets-store-csi-driver-provider-aws, cni-plugins, trillian, ctop, kubernetes-event-exporter, q, supercronic, tflint, vexctl, thanos, fuse-overlayfs-snapshotter, helm, kubernetes-dashboard-metrics-scraper, kube-rbac-proxy, gops,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, secrets-store-csi-driver-provider-aws, cni-plugins, trillian, ctop, kubernetes-event-exporter, q, supercronic, tflint, vexctl, thanos, fuse-overlayfs-snapshotter, helm, kubernetes-dashboard-metrics-scraper, kube-rbac-proxy, gops,...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to improper certificate validation. An attacker can intercept secure communications by presenting a forged certificate. Remediation Upgrade github.com/mongodb/mongo-tools/common/db to version 3.6.21,...

Security Bulletin: Multiple vulnerabilities in the mongo-tools utility affect IBM WebSphere Automation

Summary There are multiple vulnerabilities in the mongo-tools utility used in IBM WebSphere Automation. These have been addressed in the remediation section. Vulnerability Details CVEID:CVE-2022-41715 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by the compilation of regula...