175 matches found
AZL-75473 CVE-2025-11065 affecting package opa 0.63.0-2
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
Azure Linux 3.0 Security Update: opa (CVE-2025-46569)
The version of opa installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46569 advisory. - Open Policy Agent OPA is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a...
CVE-2022-23628
OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree AST that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted are those that parse and compare web paths...
Linux Distros Unpatched Vulnerability : CVE-2023-54219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert IB/isert: Fix incorrect release of isert connection Commit: 699826f4e30a IB/isert: Fix incorrect release of isert connection is causing problems on OPA...
UBUNTU-CVE-2023-54219
In the Linux kernel, the following vulnerability has been resolved: Revert "IB/isert: Fix incorrect release of isert connection" Commit: 699826f4e30a "IB/isert: Fix incorrect release of isert connection" is causing problems on OPA when DEVICEREMOVAL is happening. ------------ cut here -----------...
CVE-2023-54219
In the Linux kernel, the following vulnerability has been resolved: Revert "IB/isert: Fix incorrect release of isert connection" Commit: 699826f4e30a "IB/isert: Fix incorrect release of isert connection" is causing problems on OPA when DEVICEREMOVAL is happening. ------------ cut here -----------...
OPENSUSE-SU-2025:15775-1 opa-1.11.0-1.1 on GA media
These are all security issues fixed in the opa-1.11.0-1.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2025-33793
External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...
EUVD-2015-5228
Malware in sbrugna...
EUVD-2006-1884
Malware in sbrugna...
EUVD-2025-12838
Malicious code in bioql PyPI...
EUVD-2024-2556
Malicious code in bioql PyPI...
EUVD-2024-2263
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-40627
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fastapi OPA is an opensource fastapi middleware which includes auth flow. HTTP OPTIONS requests are always allowed by OpaMiddleware, even when they lack...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: aws-iam-authenticator-fips, vault-secrets-operator, victoriametrics-operator, helm-mapkubeapis, cert-manager-cmctl-fips, crossplane-provider-sql, external-dns, nri-memcached, buildkitd, render-template, pulumi-language-java, k9s-fips, dbmate, cilium-envoy, metallb,...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2025:02592-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02592-1 advisory. Update to version 2.5.3 jscSLE-23879: - CVE-2025-46569: Fixed OPA server Data API HTTP path injection of...
Security update for cosign
This update for cosign fixes the following issues: Update to version 2.5.3 jscSLE-23879: CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego bsc1246725 Changelog: Update to 2.5.3: Add signing-config create command 4280 Allow multiple services to be specified for trusted-root...
SUSE-SU-2025:02592-1 Security update for cosign
This update for cosign fixes the following issues: Update to version 2.5.3 jscSLE-23879: - CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego bsc1246725 Changelog: Update to 2.5.3: - Add signing-config create command 4280 - Allow multiple services to be specified for trusted-ro...
