GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: k9s, helm-operator, cert-manager-cmctl, chart-testing, kots, flux, zot, trivy, chartmuseum, k8ssandra-client, zarf, helm-docs, eksctl, cluster-api-helm-controller, cilium-cli, flux-source-controller, flux-helm-controller, tw, pluto, rancher-helm, kubescape, helm-push...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: k9s, helm-operator, cert-manager-cmctl, chart-testing, kots, flux, zot, trivy, chartmuseum, k8ssandra-client, zarf, helm-docs, eksctl, cluster-api-helm-controller, cilium-cli, flux-source-controller, flux-helm-controller, tw, pluto, rancher-helm, kubescape, helm-push...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: k9s, helm-operator, cert-manager-cmctl, chart-testing, kots, flux, zot, trivy, chartmuseum, k8ssandra-client, zarf, helm-docs, eksctl, cluster-api-helm-controller, cilium-cli, flux-source-controller, flux-helm-controller, tw, pluto, rancher-helm, kubescape, helm-push...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: rancher-helm, helm-operator-fips, cluster-api-helm-controller, flux-fips, harbor-fips, flux-source-controller, tw, chartmuseum, consul-k8s, helm-push, trivy-fips, flux-helm-controller, helm-docs, eksctl, pluto, zarf, zot, cilium-cli, trivy, flux-helm-controller-fips,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: rancher-helm, helm-operator-fips, cluster-api-helm-controller, flux-fips, harbor-fips, flux-source-controller, tw, chartmuseum, consul-k8s, helm-push, trivy-fips, flux-helm-controller, helm-docs, eksctl, pluto, zarf, zot, cilium-cli, trivy, flux-helm-controller-fips,...

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

SUSE-SU-2025:20184-1 Security update for elemental-operator

This update for elemental-operator fixes the following issues: - Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the...

Security update for elemental-operator

This update for elemental-operator fixes the following issues: Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the K...

messmittel-exakt.de Cross Site Scripting vulnerability OBB-4043504

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

casemephi.com Cross Site Scripting vulnerability OBB-4043288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ibw.at Cross Site Scripting vulnerability OBB-4043184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

toolkits.horiba-abx.com Cross Site Scripting vulnerability OBB-4043142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

Important: Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

The 1.1.2 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, dataplaneapi, amazon-cloudwatch-agent-operator, terraform-provider-tls, kubernetes, petname, git-sync, age, kubecolor, src-fingerprint, aactl, terraform-provider-time, dgraph, crossplane-provider-azure-storage, wave, docker-cl...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, dataplaneapi, amazon-cloudwatch-agent-operator, terraform-provider-tls, kubernetes, petname, git-sync, age, kubecolor, src-fingerprint, aactl, terraform-provider-time, dgraph, crossplane-provider-azure-storage, wave, docker-cl...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, cass-operator-fips, crossplane, velero, velero-plugin-for-aws-fips, dex, dynamic-localpv-provisioner-fips, kbld, fluent-operator-fips, wave, amass, karpenter, kyverno-policy-reporter-kyverno-plugin, secrets-store-csi-driver-provider-gcp,...

canoe-europe.org Cross Site Scripting vulnerability OBB-4043070

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m.politik-lexikon.at Cross Site Scripting vulnerability OBB-4043057

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

firstname-bordeaux.hoteldebordeaux.net Cross Site Scripting vulnerability OBB-4043026

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...