61798 matches found
CVE-2026-25233 PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0...
CVE-2026-25233 PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0...
Important: Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update
An updated OpenShift Compliance Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift Compliance Operator v1.8.2 is now available. See the documentation for bug fix information:...
Malicious Package
Overview transform-exponentiation-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
MAL-2026-665 Malicious code in transform-exponentiation-operator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b79481ce559cb600cfe4b2897847eb06d38b5cbe4ef456339cbbac7b240e60 The package transform-exponentiation-operator was found to contain malicious code. Source: ghsa-malware...
Malicious code in transform-exponentiation-operator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b79481ce559cb600cfe4b2897847eb06d38b5cbe4ef456339cbbac7b240e60 The package transform-exponentiation-operator was found to contain malicious code. Source: ghsa-malware...
PT-2026-6506
External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function in github.com/external-secrets/external-secrets...
GO-2026-4351 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator
Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator...
CVE-2025-61728 vulnerabilities
Vulnerabilities for packages: rancher-helm, terraform-provider-pagerduty, cert-manager-cmctl, timoni, croc, kine, k8sgateway, cilium-cli, mc, opentofu, headlamp, steampipe, aws-flb-cloudwatch, gitness, cosign, helm, terraform, hubble, opensearch-k8s-operator, flux-image-automation-controller, src...
GHSA-G9Q4-QJX4-2V7Q vulnerabilities
Vulnerabilities for packages: rancher-helm, terraform-provider-pagerduty, cert-manager-cmctl, timoni, croc, kine, k8sgateway, cilium-cli, mc, opentofu, headlamp, steampipe, aws-flb-cloudwatch, gitness, cosign, helm, terraform, hubble, opensearch-k8s-operator, flux-image-automation-controller, src...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: nri-redis, rancher-helm, karma-fips, minio-object-browser-fips, conjur-cli, kube-arangodb-fips, sops-fips, pvc-autoresizer, knative-serving-fips, tigera-operator, cloudbeat, cloudbeat-fips, ceph-csi-operator-fips, mc, chisel-fips, aws-privateca-issuer,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: nri-redis, rancher-helm, karma-fips, minio-object-browser-fips, conjur-cli, kube-arangodb-fips, sops-fips, pvc-autoresizer, knative-serving-fips, tigera-operator, cloudbeat, cloudbeat-fips, ceph-csi-operator-fips, mc, chisel-fips, aws-privateca-issuer,...