GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, emissary, kubernetes, rancher-telemetry, aws-node-termination-handler, verticadb-operator, op-geth, infinispan-operator, juicefs-csi-driver, redis-operator, cloudflared, guac, amazon-cloudwatch-agent, etcd, kubevela...

GO-2025-4087 vulnerabilities

Vulnerabilities for packages: op-geth...

GO-2025-4087 vulnerabilities

Vulnerabilities for packages: op-geth...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, kserve-rest-proxy, delve, s5cmd, cluster-api-provider-vsphere, vcluster, conftest, kind, docker-credential-acr-env, secrets-store-csi-driver, gitsign,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, kserve-rest-proxy, pombump, delve, s5cmd, cluster-api-provider-vsphere, vcluster, conftest, kind, docker-credential-acr-env, secrets-store-csi-driver, gitsign,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, kserve-rest-proxy, pombump, delve, s5cmd, cluster-api-provider-vsphere, vcluster, conftest, kind, docker-credential-acr-env, secrets-store-csi-driver, gitsign,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, cluster-api-azure-controller-fips, falcosidekick-fips, knative-operator, liquibase-package-manager, skaffold, ytt-fips, gptscript, jobset-fips, livekit-server-fips, temporal-server-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, cluster-api-azure-controller-fips, falcosidekick-fips, knative-operator, liquibase-package-manager, skaffold, ytt-fips, gptscript, jobset-fips, livekit-server-fips, temporal-server-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, cluster-api-azure-controller-fips, falcosidekick-fips, knative-operator, liquibase-package-manager, skaffold, ytt-fips, gptscript, jobset-fips, livekit-server-fips, temporal-server-fips,...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

Chain split caused by memory corruption in EVM

Lines of code Vulnerability details Chain split caused by memory corruption in EVM We recently found that the op-geth@3fa9e81 repository has a memory corruption vulnerability in EVM, which can cause a consensus error. Specifically, vulnerable nodes obtain a different stateRoot when processing a...