GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: stern, glow, mariadb-operator, minio-operator, kube-vip-cloud-provider, newrelic-k8s-metadata-injection, timescaledb-tune, terraform-mcp-server, malcontent, cloudprober, secrets-store-csi-driver-provider-gcp, aws-otel-collector, kine, xcover,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: stern, glow, mariadb-operator, minio-operator, kube-vip-cloud-provider, newrelic-k8s-metadata-injection, timescaledb-tune, terraform-mcp-server, malcontent, cloudprober, secrets-store-csi-driver-provider-gcp, aws-otel-collector, kine, xcover,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: stern, glow, mariadb-operator, minio-operator, kube-vip-cloud-provider, newrelic-k8s-metadata-injection, terraform-mcp-server, malcontent, cloudprober, secrets-store-csi-driver-provider-gcp, aws-otel-collector, kine, kubernetes-csi-external-resizer, portieris,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kpt, mailpit, crossplane-provider-gcp-fips, percona-xtradb-cluster-operator-fips, mariadb-operator-fips, cilium, secrets-store-csi-driver-provider-azure, prometheus-elasticsearch-exporter, xeol-fips, cert-manager-istio-csr-fips, crossplane-provider-gitlab, blob-csi,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kpt, mailpit, crossplane-provider-gcp-fips, percona-xtradb-cluster-operator-fips, mariadb-operator-fips, cilium, secrets-store-csi-driver-provider-azure, prometheus-elasticsearch-exporter, xeol-fips, cert-manager-istio-csr-fips, crossplane-provider-gitlab, blob-csi,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kpt, mailpit, crossplane-provider-gcp-fips, mariadb-operator-fips, cilium, secrets-store-csi-driver-provider-azure, prometheus-elasticsearch-exporter, xeol-fips, cert-manager-istio-csr-fips, crossplane-provider-gitlab, blob-csi, k8sgpt-operator, configmap-reload-fips...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

Chain split caused by memory corruption in EVM

Lines of code Vulnerability details Chain split caused by memory corruption in EVM We recently found that the op-geth@3fa9e81 repository has a memory corruption vulnerability in EVM, which can cause a consensus error. Specifically, vulnerable nodes obtain a different stateRoot when processing a...