CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, docker-cli-buildx, gomplate, gitlab-runner, grafana-operator, kyverno-notation-aws, addon-resizer, mailpit, cue, kubernetes-dashboard, gogatekeeper, vault-env, polaris, flux-source-controller, sonobuoy, regclient, coredns,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, docker-cli-buildx, gomplate, gitlab-runner, cni-plugins, grafana-operator, kyverno-notation-aws, addon-resizer, mailpit, cue, kubernetes-dashboard, gogatekeeper, mage, vault-env, polaris, flux-source-controller, sonobuoy,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, docker-cli-buildx, gomplate, gitlab-runner, cni-plugins, grafana-operator, kyverno-notation-aws, addon-resizer, mailpit, cue, kubernetes-dashboard, gogatekeeper, mage, vault-env, polaris, flux-source-controller, sonobuoy,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, overmind, gomplate-fips, chezmoi, k8ssandra-client, argo-rollouts, azuredisk-csi, crossplane-provider-aws-lambda-fips, db-operator, kubo-fips, longhorn-cli-fips, minify, opentelemetry-operator, timoni, keda-fips, dragonfly-operator-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: external-secrets-operator, overmind, gomplate-fips, chezmoi, k8ssandra-client, argo-rollouts, azuredisk-csi, crossplane-provider-aws-lambda-fips, db-operator, kubo-fips, longhorn-cli-fips, minify, opentelemetry-operator, timoni, keda-fips, dragonfly-operator-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gomplate-fips, chezmoi, k8ssandra-client, argo-rollouts, azuredisk-csi, crossplane-provider-aws-lambda-fips, db-operator, kubo-fips, longhorn-cli-fips, opentelemetry-operator, timoni, keda-fips, dragonfly-operator-fips,...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

Chain split caused by memory corruption in EVM

Lines of code Vulnerability details Chain split caused by memory corruption in EVM We recently found that the op-geth@3fa9e81 repository has a memory corruption vulnerability in EVM, which can cause a consensus error. Specifically, vulnerable nodes obtain a different stateRoot when processing a...