220 matches found
GHSA-W2JF-268Q-MRVH OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses
Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may use unbounded memory, cause high CPU usage, or crash when encountering maliciously-crafted TLS certificate chains or tar archives. Those who depend on modules or...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: rootlesskit, grpcurl, minio-object-browser, kube-metrics-adapter, aws-node-termination-handler-fips, configmap-reload, livekit-egress, tigera-operator, prometheus, minio-object-browser-fips, mongodb-kubernetes-operator, flux-fips, neuvector-dbgen, beats-fips,...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: rootlesskit, grpcurl, minio-object-browser, kube-metrics-adapter, aws-node-termination-handler-fips, configmap-reload, livekit-egress, tigera-operator, prometheus, minio-object-browser-fips, mongodb-kubernetes-operator, flux-fips, neuvector-dbgen, beats-fips,...
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: rootlesskit, grpcurl, minio-object-browser, kube-metrics-adapter, aws-node-termination-handler-fips, configmap-reload, livekit-egress, tigera-operator, prometheus, minio-object-browser-fips, mongodb-kubernetes-operator, flux-fips, neuvector-dbgen, beats-fips,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: rootlesskit, grpcurl, minio-object-browser, kube-metrics-adapter, aws-node-termination-handler-fips, configmap-reload, livekit-egress, tigera-operator, prometheus, minio-object-browser-fips, mongodb-kubernetes-operator, flux-fips, neuvector-dbgen, beats-fips,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: rootlesskit, grpcurl, minio-object-browser, kube-metrics-adapter, aws-node-termination-handler-fips, configmap-reload, livekit-egress, tigera-operator, prometheus, minio-object-browser-fips, mongodb-kubernetes-operator, flux-fips, neuvector-dbgen, beats-fips,...
Fedora: Security Advisory (FEDORA-2025-121049bbf7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: aws-eks-pod-identity-agent, cert-manager, kube-logging-operator, spark-operator, tflint, grafana-rollout-operator, spire-controller-manager, prometheus, tigera-operator, delve, karpenter, migrate, caddy, rabbitmq-cluster-operator, kubernetes-dashboard-api, nri-apache...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: xeol, kots, trivy, steampipe, zot, rancher-fleet, tflint, conftest, k9s, zarf, terragrunt, wolfictl, opentofu, tfsec, grype, snyk-cli, kubescape, trivy-operator, syft, terraform...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: xeol, kots, trivy, steampipe, zot, rancher-fleet, tflint, conftest, k9s, zarf, terragrunt, wolfictl, opentofu, tfsec, grype, snyk-cli, kubescape, trivy-operator, syft, terraform...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: zot, terraform-fips, opentofu-fips, cloudbeat, syft, tflint, k9s, kubescape, wolfictl, xeol-fips, trivy, trivy-operator, zarf, kots, conftest-fips, k9s-fips, xeol, grype-db, syft-fips, terragrunt, trivy-fips, grype-fips, cloudbeat-fips, conftest, snyk-cli,...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: zot, terraform-fips, opentofu-fips, cloudbeat, syft, tflint, k9s, kubescape, wolfictl, xeol-fips, trivy, trivy-operator, zarf, kots, conftest-fips, k9s-fips, xeol, grype-db, syft-fips, terragrunt, trivy-fips, grype-fips, cloudbeat-fips, conftest, snyk-cli,...
Fedora 43 : opentofu (2025-121049bbf7)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-121049bbf7 advisory. Automatic update for opentofu-1.9.1-1.fc43. Changelog Wed May 14 2025 Mikel Olasagasti Uranga - 1.9.1-1 - Update to 1.9.1 - Closes rhbz2362077...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: aws-eks-pod-identity-agent, cortex-fips, grpcurl, kube-metrics-adapter, aws-node-termination-handler-fips, configmap-reload, overmind, crossplane-provider-sql, tigera-operator, prometheus, secrets-store-csi-driver-provider-azure-fips, step-fips,...
opentofu-1.9.1-1.1 on GA media (moderate)
opentofu-1.9.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15030-1 Rating: moderate Cross-References: CVE-2024-45336 CVE-2024-45341 CVE-2025-22866 CVSS scores: CVE-2024-45336 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2024-45341 SUSE : 4.2...
OPENSUSE-SU-2025:15030-1 opentofu-1.9.1-1.1 on GA media
These are all security issues fixed in the opentofu-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-WPFP-CM49-9M9Q vulnerabilities
Vulnerabilities for packages: terraform, vault, opentofu-fips, opentofu...
CVE-2025-0377 vulnerabilities
Vulnerabilities for packages: terraform, vault, opentofu-fips, opentofu...
opentofu-1.8.6-1.1 on GA media (moderate)
opentofu-1.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14520-1 Rating: moderate Cross-References: CVE-2024-34156 CVSS scores: CVE-2024-34156 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...