156 matches found
Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands
Impact In some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands the GET access to all Kubernetes Secrets that exist in the given Kubernetes namespace. The exact scenario when this happens is when: Apache Kafka...
CVE-2025-64432 KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to...
MAL-2025-48579 Malicious code in mtls-ambassador (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7751747bc3d849e8a9b44fe993f8e2e3a5779f8c940573453433084eb4d3a07b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview mtls-ambassador is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in mtls-ambassador (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7751747bc3d849e8a9b44fe993f8e2e3a5779f8c940573453433084eb4d3a07b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35755
Malicious code in mtls-ambassador npm...
EUVD-2021-1046
Malware in sbrugna...
EUVD-2020-7219
Malware in sbrugna...
EUVD-2021-22991
Malware in sbrugna...
EUVD-2023-1672
Malicious code in bioql PyPI...
EUVD-2023-2059
Malicious code in bioql PyPI...
EUVD-2025-29767
Malicious code in bioql PyPI...
EUVD-2023-1283
Malicious code in bioql PyPI...
EUVD-2022-53131
Malicious code in bioql PyPI...
EUVD-2022-6207
Malicious code in bioql PyPI...
EUVD-2024-36415
Malicious code in bioql PyPI...
EUVD-2022-7497
Malicious code in bioql PyPI...
EUVD-2022-53483
Malicious code in bioql PyPI...
CVE-2025-59353 Manager generates mTLS certificates for arbitrary IP addresses
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, a peer can obtain a valid TLS certificate for arbitrary IP addresses, effectively rendering the mTLS authentication useless. The issue is that the Manager’s Certificate gRPC service does not...
Linux Distros Unpatched Vulnerability : CVE-2020-7956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to...