GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: kubevela, kubernetes, cloudflared, guac, etcd, amazon-cloudwatch-agent, rancher-telemetry, infinispan-operator, redis-operator, juicefs-csi-driver, opentelemetry-collector-contrib, aws-node-termination-handler, verticadb-operator, op-geth, emissary, jitsucom-bulker...

GO-2025-4087 vulnerabilities

Vulnerabilities for packages: op-geth...

GO-2025-4087 vulnerabilities

Vulnerabilities for packages: op-geth...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kubecolor, k8sgpt, openbao, go-licenses, mailpit, grafana-alloy, caddy, envoy-ratelimit, frp, cni-plugins, terraform-provider-azuread, external-dns, thanos, cloud-provider-aws, gitleaks, kapp, pgtimetable, nsc, redis-operator, juicefs, actions-runner-controller,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kubecolor, k8sgpt, openbao, go-licenses, mailpit, grafana-alloy, caddy, envoy-ratelimit, frp, cni-plugins, terraform-provider-azuread, external-dns, thanos, cloud-provider-aws, gitleaks, kapp, pgtimetable, nsc, redis-operator, juicefs, actions-runner-controller,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: k8sgpt, openbao, go-licenses, mailpit, grafana-alloy, caddy, envoy-ratelimit, frp, terraform-provider-azuread, external-dns, thanos, cloud-provider-aws, gitleaks, kapp, pgtimetable, nsc, redis-operator, juicefs, actions-runner-controller, mattermost, k8ssandra-client...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, amazon-k8s-cni, elvish, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, croc, amass, paranoia, backup-restore-operator, zitadel, step-fips, kubernetes-csi-external-snapshotter, vault-csi-provider-fips, tigera-operator-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, amazon-k8s-cni, elvish, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, croc, amass, paranoia, backup-restore-operator, zitadel, step-fips, kubernetes-csi-external-snapshotter, vault-csi-provider-fips, tigera-operator-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, croc, amass, paranoia, backup-restore-operator, zitadel, step-fips, kubernetes-csi-external-snapshotter, vault-csi-provider-fips, tigera-operator-fips, volume-modifier-for-k8s,...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

Chain split caused by memory corruption in EVM

Lines of code Vulnerability details Chain split caused by memory corruption in EVM We recently found that the op-geth@3fa9e81 repository has a memory corruption vulnerability in EVM, which can cause a consensus error. Specifically, vulnerable nodes obtain a different stateRoot when processing a...