CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: dbmate, cert-manager, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, podinfo, rancher-fleet, incert, src-fingerprint, vault-k8s, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, hcloud, sftpgo-plugin-eventsearch, dive, terraform-docs,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: dbmate, cert-manager, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, podinfo, rancher-fleet, incert, src-fingerprint, vault-k8s, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, hcloud, sftpgo-plugin-eventsearch, dive, terraform-docs,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: dbmate, cert-manager, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, podinfo, rancher-fleet, incert, src-fingerprint, vault-k8s, timoni, mc, timescaledb-parallel-copy, hcloud, sftpgo-plugin-eventsearch, dive, terraform-docs, opa-envoy,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, sftpgo-plugin-auth, gitlab-rails-ce, delve, json-exporter-fips, jitsucom-bulker, karma-fips, memcached-exporter-fips, rancher-agent, crossplane-provider-aws-lambda-fips, elastic-agent, kube-logging-operator-custom-runner-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: supercronic, direnv, sftpgo-plugin-auth, gitlab-rails-ce, delve, json-exporter-fips, jitsucom-bulker, karma-fips, memcached-exporter-fips, rancher-agent, crossplane-provider-aws-lambda-fips, elastic-agent, kube-logging-operator-custom-runner-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, sftpgo-plugin-auth, gitlab-rails-ce, delve, json-exporter-fips, jitsucom-bulker, karma-fips, memcached-exporter-fips, rancher-agent, crossplane-provider-aws-lambda-fips, elastic-agent, kube-logging-operator-custom-runner-fips,...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

Chain split caused by memory corruption in EVM

Lines of code Vulnerability details Chain split caused by memory corruption in EVM We recently found that the op-geth@3fa9e81 repository has a memory corruption vulnerability in EVM, which can cause a consensus error. Specifically, vulnerable nodes obtain a different stateRoot when processing a...