CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, percona-server-mongodb-operator, cert-manager-cmctl, step-issuer, cert-manager-csi-driver, aws-privateca-issuer, mariadb-operator, cert-manager-istio-csr, cert-manager-webhook-pdns...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, percona-server-mongodb-operator, cert-manager-cmctl, step-issuer, cert-manager-csi-driver, aws-privateca-issuer, mariadb-operator, cert-manager-istio-csr, cert-manager-webhook-pdns...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: gitlab-operator, cert-manager-istio-csr-fips, step-issuer, cert-manager-csi-driver-fips, percona-xtradb-cluster-operator-fips, cert-manager-openshift-routes, percona-server-mongodb-operator, opentelemetry-operator, cert-manager-cmctl, percona-xtradb-cluster-operator,...

EUVD-2020-23328

Malware in sbrugna...

CVE-2020-35666

Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedosbase.js mishandles req.body validation, as demonstrated by MongoDB operator attacks such as an X-User-Id$ne=1 value...

Sql injection

Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedosbase.js mishandles req.body validation, as demonstrated by MongoDB operator attacks such as an X-User-Id$ne=1 value...

PT-2020-19848 · Mongodb · Mongodb Enterprise Kubernetes Operator

Name of the Vulnerable Software and Affected Versions: MongoDB Enterprise Kubernetes Operator versions 1.0 through 1.1 MongoDB Enterprise Kubernetes Operator version 1.2 through 1.2.3 MongoDB Enterprise Kubernetes Operator version 1.3 through 1.3.0 MongoDB Enterprise Kubernetes Operator version 1...