CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: eksctl, rancher-helm, chartmuseum, cert-manager-cmctl, helm-operator, tw, helm-docs, k8ssandra-client, kubescape, chart-testing, zot, cluster-api-helm-controller, flux-helm-controller, flux-source-controller, helm-push, kots, k9s, cilium-cli, zarf, trivy, flux, pluto...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: eksctl, rancher-helm, chartmuseum, cert-manager-cmctl, helm-operator, tw, helm-docs, k8ssandra-client, kubescape, chart-testing, zot, cluster-api-helm-controller, flux-helm-controller, flux-source-controller, helm-push, kots, k9s, cilium-cli, zarf, trivy, flux, pluto...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: eksctl, rancher-helm, chartmuseum, cert-manager-cmctl, helm-operator, tw, helm-docs, k8ssandra-client, kubescape, chart-testing, zot, cluster-api-helm-controller, flux-helm-controller, flux-source-controller, helm-push, kots, k9s, cilium-cli, zarf, trivy, flux, pluto...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: eksctl, rancher-helm, chartmuseum, cert-manager-cmctl, helm-operator, tw, helm-docs, k8ssandra-client, kubescape, chart-testing, zot, cluster-api-helm-controller, flux-helm-controller, flux-source-controller, helm-push, kots, k9s, cilium-cli, zarf, trivy, flux, pluto...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, kots, harbor-fips, consul-k8s, helm-operator, helm-docs, tw, kuma, k8ssandra-client, chart-testing-fips, flux, k9s, trivy, cert-manager-cmctl-fips, flux-helm-controller-fips, cilium-cli, k8ssandra-client-fips,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, kots, harbor-fips, consul-k8s, helm-operator, helm-docs, tw, kuma, k8ssandra-client, chart-testing-fips, flux, k9s, trivy, cert-manager-cmctl-fips, flux-helm-controller-fips, cilium-cli, k8ssandra-client-fips,...

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

SUSE-SU-2025:20184-1 Security update for elemental-operator

This update for elemental-operator fixes the following issues: - Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the...

Security update for elemental-operator

This update for elemental-operator fixes the following issues: Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the K...

messmittel-exakt.de Cross Site Scripting vulnerability OBB-4043504

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

casemephi.com Cross Site Scripting vulnerability OBB-4043288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ibw.at Cross Site Scripting vulnerability OBB-4043184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

toolkits.horiba-abx.com Cross Site Scripting vulnerability OBB-4043142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: openbao-k8s, snyk-cli, scorecard, terraform-provider-kubernetes, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, temporal-server, kube-bench, zot, sriov-network-device-plugin, spire-controller-manager, nodetaint, go-licenses, nri-elasticsearch,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: openbao-k8s, snyk-cli, scorecard, terraform-provider-kubernetes, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, temporal-server, kube-bench, zot, sriov-network-device-plugin, spire-controller-manager, nodetaint, go-licenses, nri-elasticsearch,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: ko-fips, crane-fips, gatus, kyverno, maru, opentelemetry-operator-fips, vt-cli, ip-masq-agent, flux-kustomize-controller, trust-manager, mattmoor-chainit, nri-cassandra, local-static-provisioner, dataplaneapi, aactl, dbmate, prometheus-redis-exporter-fips,...

canoe-europe.org Cross Site Scripting vulnerability OBB-4043070

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m.politik-lexikon.at Cross Site Scripting vulnerability OBB-4043057

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...