AZL-75551 CVE-2025-11065 affecting package packer for versions less than 1.9.5-18

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

CVE-2025-47913 affecting package packer for versions less than 1.9.5-11

CVE-2025-47913 affecting package packer for versions less than 1.9.5-11. A patched version of the package is available...

AZL-70340 CVE-2025-47913 affecting package packer for versions less than 1.9.5-11

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

AZL-70325 CVE-2025-47913 affecting package packer for versions less than 1.9.5-16

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

CVE-2025-58058 affecting package packer for versions less than 1.9.5-10

CVE-2025-58058 affecting package packer for versions less than 1.9.5-10. A patched version of the package is available...

CVE-2025-58058 affecting package packer for versions less than 1.9.5-15

CVE-2025-58058 affecting package packer for versions less than 1.9.5-15. A patched version of the package is available...

EUVD-2011-4062

Malware in sbrugna...

EUVD-2015-1597

Malware in sbrugna...

EUVD-2015-1596

Malware in sbrugna...

EUVD-2019-9298

Malware in sbrugna...

EUVD-2022-45783

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-42717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configure...

Linux Distros Unpatched Vulnerability : CVE-2023-23456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack in ptmt.cpp file. The flow allows an attacker to cause a denial of service abort via a...

Linux Distros Unpatched Vulnerability : CVE-2019-20051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A floating-point exception was discovered in PackLinuxElf::elfhash in plxelf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to deni...

AZL-66741 CVE-2025-58058 affecting package packer for versions less than 1.9.5-15

xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...