Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, src-fingerprint, openbao-k8s, docker-cli-buildx, crane, multus-cni, kubernetes, crossplane-provider-family-azure, azure-service-operator, aactl, volume-modifier-for-k8s, prometheus, dynamic-localpv-provisioner,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, src-fingerprint, openbao-k8s, docker-cli-buildx, crane, multus-cni, kubernetes, crossplane-provider-family-azure, azure-service-operator, aactl, volume-modifier-for-k8s, prometheus, dynamic-localpv-provisioner,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: chartmuseum, docker-credential-acr-env, spire-controller-manager, capslock, aws-flb-firehose, prometheus-postgres-exporter, docker-fips, terraform-provider-azuread-fips, kube-logging-logging-operator, nri-nginx, shfmt, local-path-provisioner, spiffe-helper-fips,...

canoe-europe.org Cross Site Scripting vulnerability OBB-4043070

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m.politik-lexikon.at Cross Site Scripting vulnerability OBB-4043057

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

firstname-bordeaux.hoteldebordeaux.net Cross Site Scripting vulnerability OBB-4043026

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

filler-schatz.de Cross Site Scripting vulnerability OBB-4043000

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

financia-business-school.com Cross Site Scripting vulnerability OBB-4042996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

CVE-2025-24375 MySQL K8s charm could leak credentials for root-level user `serverconfig`

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

CVE-2025-24375 MySQL K8s charm could leak credentials for root-level user `serverconfig`

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

offbshop.vn Cross Site Scripting vulnerability OBB-4042882

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

irisflorist.vn Cross Site Scripting vulnerability OBB-4042860

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Moderate: Red Hat Security Advisory: DevWorkspace Operator 0.33.0 release.

DevWorkspace Operator 0.33.0 has been released. The DevWorkspace Operator extends OpenShift to provide DevWorkspace support. Security Fixes: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176...

exclusive-2-room-city-apartment.hannovertophotels.com Cross Site Scripting vulnerability OBB-4042753

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MySQL K8s operator 安全漏洞

MySQL K8s operator is a Canonical open source character operator for running MySQL on Kubernetes. A security vulnerability exists in versions prior to MySQL K8s operator 221, which stems from improperly set permissions on a temporary script file that could lead to the disclosure of database user...

PT-2025-15871 · Canonical · Charmed Mysql Machine Operator +1

Name of the Vulnerable Software and Affected Versions: Charmed MySQL K8s operator versions prior to revision 221 Charmed MySQL machine operator versions prior to revision 338 Description: The Charmed MySQL K8s operator has a method for calling SQL DDL or python-based mysql-shell scripts that can...

Critical: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.14.2

cert-manager Operator for Red Hat OpenShift 1.14.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...