GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: kubevela, juicefs-csi-driver, emissary, op-geth, guac, infinispan-operator, rancher-telemetry, amazon-cloudwatch-agent, etcd, aws-node-termination-handler, kubernetes, redis-operator, verticadb-operator, jitsucom-bulker, cloudflared...

GO-2025-4087 vulnerabilities

Vulnerabilities for packages: op-geth...

GO-2025-4087 vulnerabilities

Vulnerabilities for packages: op-geth...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, kargo, terraform-provider-sendgrid, maru, speedtest-go, src-fingerprint, docker-machine-driver-harvester, kuberlr, portieris, mongodb-kubernetes-operator, langfuse, gostatsd, neuvector-dbgen, azuredisk-csi, cluster-api, bank-vaults,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, kargo, terraform-provider-sendgrid, maru, speedtest-go, src-fingerprint, docker-machine-driver-harvester, kuberlr, portieris, mongodb-kubernetes-operator, langfuse, cargobump, gostatsd, licenseclassifier, neuvector-dbgen, azuredisk-csi...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, kargo, terraform-provider-sendgrid, maru, speedtest-go, src-fingerprint, docker-machine-driver-harvester, kuberlr, portieris, mongodb-kubernetes-operator, langfuse, cargobump, gostatsd, licenseclassifier, neuvector-dbgen, azuredisk-csi...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, mods, minio-object-browser, terraform-provider-time, tetragon, ucd, authservice, azure-service-operator, coredns, yace-fips, amazon-cloudwatch-agent-operator, gitness, flux-kustomize-controller, opensearch-k8s-operator, azcopy, witness,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, velero-plugin-for-microsoft-azure-fips, mods, minio-object-browser, terraform-provider-time, tetragon, ucd, authservice, azure-service-operator, coredns, yace-fips, amazon-cloudwatch-agent-operator, gitness, age, flux-kustomize-controller,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, velero-plugin-for-microsoft-azure-fips, mods, minio-object-browser, terraform-provider-time, tetragon, ucd, authservice, azure-service-operator, coredns, yace-fips, amazon-cloudwatch-agent-operator, gitness, age, flux-kustomize-controller,...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

Chain split caused by memory corruption in EVM

Lines of code Vulnerability details Chain split caused by memory corruption in EVM We recently found that the op-geth@3fa9e81 repository has a memory corruption vulnerability in EVM, which can cause a consensus error. Specifically, vulnerable nodes obtain a different stateRoot when processing a...