GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: guac, amazon-cloudwatch-agent, emissary, jitsucom-bulker, juicefs-csi-driver, cloudflared, verticadb-operator, rancher-telemetry, kubernetes, kubevela, op-geth, infinispan-operator, redis-operator, etcd, aws-node-termination-handler...

GO-2025-4087 vulnerabilities

Vulnerabilities for packages: op-geth...

GO-2025-4087 vulnerabilities

Vulnerabilities for packages: op-geth...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: vcluster, bom, spire-controller-manager, nri-mssql, kubebuilder, grpcurl, kserve, timestamp-authority, regclient, kubernetes-dashboard, neuvector-dbgen, crossplane-provider-aws-cloudfront, nerdctl, cluster-api-azure-controller, opa, sonobuoy, hubble, azcopy,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: vcluster, bom, spire-controller-manager, nri-mssql, kubebuilder, grpcurl, kserve, timestamp-authority, regclient, licenseclassifier, kubernetes-dashboard, neuvector-dbgen, crossplane-provider-aws-cloudfront, gobump, nerdctl, cluster-api-azure-controller, opa, sonobuo...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: vcluster, bom, spire-controller-manager, nri-mssql, kubebuilder, grpcurl, kserve, timestamp-authority, regclient, licenseclassifier, kubernetes-dashboard, neuvector-dbgen, crossplane-provider-aws-cloudfront, gobump, nerdctl, cluster-api-azure-controller, opa, sonobuo...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kube-vip, terraform-provider-time, crossplane-provider-aws-cloudformation, cluster-autoscaler-fips, kubernetes-dashboard-auth, influx, aws-flb-kinesis-fips, addon-resizer, flux-operator, metacontroller, nri-kafka, opensearch-k8s-operator-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kube-vip, terraform-provider-time, crossplane-provider-aws-cloudformation, cluster-autoscaler-fips, kubernetes-dashboard-auth, influx, aws-flb-kinesis-fips, addon-resizer, flux-operator, metacontroller, nri-kafka, opensearch-k8s-operator-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kube-vip, terraform-provider-time, crossplane-provider-aws-cloudformation, cluster-autoscaler-fips, kubernetes-dashboard-auth, influx, aws-flb-kinesis-fips, addon-resizer, flux-operator, metacontroller, nri-kafka, opensearch-k8s-operator-fips,...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

Chain split caused by memory corruption in EVM

Lines of code Vulnerability details Chain split caused by memory corruption in EVM We recently found that the op-geth@3fa9e81 repository has a memory corruption vulnerability in EVM, which can cause a consensus error. Specifically, vulnerable nodes obtain a different stateRoot when processing a...