GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kpt, guac, prometheus-blackbox-exporter, aws-efs-csi-driver, crossplane-provider-aws-memorydb, dbmate, grafana-agent-operator, manifest-tool, ko, knative-eventing, terraform-provider-pagerduty, kubernetes-csi-node-driver-registrar, maru, cert-manager-webhook-pdns,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kpt, guac, prometheus-blackbox-exporter, aws-efs-csi-driver, crossplane-provider-aws-memorydb, dbmate, grafana-agent-operator, manifest-tool, ko, knative-eventing, terraform-provider-pagerduty, kubernetes-csi-node-driver-registrar, maru, cert-manager-webhook-pdns,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kpt, guac, prometheus-blackbox-exporter, aws-efs-csi-driver, crossplane-provider-aws-memorydb, dbmate, grafana-agent-operator, manifest-tool, ko, knative-eventing, terraform-provider-pagerduty, kubernetes-csi-node-driver-registrar, maru, cert-manager-webhook-pdns,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, nats, tfsec, quic-go-fips, net-kourier, gitlab-kas-fips, tofu-controller-fips, dapr-fips, plugin-barman-cloud-fips, pluto, packer, thanos-operator-fips, aws-load-balancer-controller-fips, kubernetes-csi-external-attacher-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, jaeger, nats, tfsec, quic-go-fips, net-kourier, gitlab-kas-fips, fixuid, tofu-controller-fips, dapr-fips, plugin-barman-cloud-fips, pluto, packer, thanos-operator-fips, aws-load-balancer-controller-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, jaeger, nats, tfsec, quic-go-fips, net-kourier, gitlab-kas-fips, fixuid, tofu-controller-fips, dapr-fips, plugin-barman-cloud-fips, pluto, packer, thanos-operator-fips, aws-load-balancer-controller-fips,...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

Chain split caused by memory corruption in EVM

Lines of code Vulnerability details Chain split caused by memory corruption in EVM We recently found that the op-geth@3fa9e81 repository has a memory corruption vulnerability in EVM, which can cause a consensus error. Specifically, vulnerable nodes obtain a different stateRoot when processing a...