GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: crane, ko, cloud-provider-vsphere, spqr, azurefile-csi, cert-manager, kubelet-csr-approver, net-kourier, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar, boring-registry, gostatsd, sealed-secrets, nats, redka, whereabouts,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: crane, ko, cloud-provider-vsphere, spqr, azurefile-csi, cert-manager, kubelet-csr-approver, net-kourier, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar, boring-registry, gostatsd, sealed-secrets, nats, redka, whereabouts,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: crane, ko, cloud-provider-vsphere, spqr, azurefile-csi, cert-manager, kubelet-csr-approver, net-kourier, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar, boring-registry, gostatsd, sealed-secrets, nats, redka, whereabouts,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: crane, ko, cloud-provider-vsphere, spqr, azurefile-csi, cert-manager, kubelet-csr-approver, net-kourier, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar, boring-registry, gostatsd, sealed-secrets, nats, redka, whereabouts,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: crane, ko, cloud-provider-vsphere, spqr, azurefile-csi, cert-manager, kubelet-csr-approver, net-kourier, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar, boring-registry, gostatsd, sealed-secrets, nats, redka, whereabouts,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: crane, ko, cloud-provider-vsphere, spqr, azurefile-csi, cert-manager, kubelet-csr-approver, net-kourier, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar, boring-registry, gostatsd, sealed-secrets, nats, redka, whereabouts,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: crane, ko, cloud-provider-vsphere, spqr, azurefile-csi, cert-manager, kubelet-csr-approver, net-kourier, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar, boring-registry, gostatsd, sealed-secrets, nats, redka, whereabouts,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: crane, ko, cloud-provider-vsphere, spqr, azurefile-csi, cert-manager, kubelet-csr-approver, net-kourier, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar, boring-registry, gostatsd, sealed-secrets, nats, redka, whereabouts,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: kubevela-fips, azuredisk-csi-fips, cloudbeat-fips, maru, whereabouts, sbom-convert, cloud-provider-gcp-cloud-controller-manager, dataplaneapi-fips, sriov-network-device-plugin-fips, prometheus-adapter, kubevela, gobuster, otel-cli, kvm-device-plugin, falco-exporter,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: kubevela-fips, azuredisk-csi-fips, cloudbeat-fips, maru, whereabouts, sbom-convert, cloud-provider-gcp-cloud-controller-manager, dataplaneapi-fips, sriov-network-device-plugin-fips, prometheus-adapter, kubevela, gobuster, otel-cli, kvm-device-plugin, falco-exporter,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: kubevela-fips, azuredisk-csi-fips, cloudbeat-fips, maru, whereabouts, sbom-convert, cloud-provider-gcp-cloud-controller-manager, dataplaneapi-fips, sriov-network-device-plugin-fips, prometheus-adapter, kubevela, gobuster, otel-cli, kvm-device-plugin, falco-exporter,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: kubevela-fips, azuredisk-csi-fips, cloudbeat-fips, maru, whereabouts, sbom-convert, cloud-provider-gcp-cloud-controller-manager, dataplaneapi-fips, sriov-network-device-plugin-fips, prometheus-adapter, kubevela, gobuster, otel-cli, kvm-device-plugin, falco-exporter,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: kubevela-fips, azuredisk-csi-fips, cloudbeat-fips, maru, whereabouts, sbom-convert, cloud-provider-gcp-cloud-controller-manager, dataplaneapi-fips, sriov-network-device-plugin-fips, prometheus-adapter, kubevela, gobuster, otel-cli, kvm-device-plugin, falco-exporter,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kubevela-fips, azuredisk-csi-fips, cloudbeat-fips, maru, whereabouts, sbom-convert, cloud-provider-gcp-cloud-controller-manager, dataplaneapi-fips, sriov-network-device-plugin-fips, prometheus-adapter, kubevela, gobuster, otel-cli, kvm-device-plugin, falco-exporter,...

EUVD-2024-51670

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, fluent-bit-plugin-loki, azuredisk-csi-fips, containerd, datadog-agent, kubevela-fips, sbom-convert, kubernetes-csi-external-provisioner, cass-operator, k8ssandra-client, kubevela, splunk-otel-collector-fips, hugo-fips, otel-cli,...

The vulnerability of the ABC Notation plugin for WordPress’ content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the ABC Notation plugin in the WordPress content management system is related to errors in processing the relative path to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: k9s, kaniko, minify, whereabouts, flannel, fluent-bit-plugin-loki, ghaudit, sqlexporter, certificate-transparency, k8sgpt, tfsec, aws-network-policy-agent, gobuster, containerd, go-licenses, wazero, opa-envoy, cri-tools, crossplane-provider-aws, oauth2-proxy, trillia...

WordPress ABC Notation plugin <= 6.1.3 - Authenticated (Contributor+) Arbitrary File Read vulnerability

Authenticated Contributor+ Arbitrary File Read vulnerability discovered by yudha in WordPress Plugin ABC Notation versions = 6.1.3...

CVE-2024-13550

The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.1.3 via the 'file' attribute of the 'abcjs' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files...