CVE-2023-45288 affecting package packer for versions less than 1.9.5-1

CVE-2023-45288 affecting package packer for versions less than 1.9.5-1. A patched version of the package is available...

CVE-2024-6104 affecting package packer for versions less than 1.9.5-2

CVE-2024-6104 affecting package packer for versions less than 1.9.5-2. A patched version of the package is available...

CVE-2023-49569 affecting package packer for versions less than 1.9.5-1

CVE-2023-49569 affecting package packer for versions less than 1.9.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39325 affecting package packer for versions less than 1.9.5-1

CVE-2023-39325 affecting package packer for versions less than 1.9.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-6104 affecting package packer for versions less than 1.9.5-2

CVE-2024-6104 affecting package packer for versions less than 1.9.5-2. A patched version of the package is available...

CVE-2025-58190 affecting package packer for versions less than 1.9.5-18

CVE-2025-58190 affecting package packer for versions less than 1.9.5-18. A patched version of the package is available...

CVE-2025-47911 affecting package packer for versions less than 1.9.5-18

CVE-2025-47911 affecting package packer for versions less than 1.9.5-18. A patched version of the package is available...

CVE-2025-21614 affecting package packer for versions less than 1.9.5-7

CVE-2025-21614 affecting package packer for versions less than 1.9.5-7. An upgraded version of the package is available that resolves this issue...

CVE-2024-24786 affecting package packer for versions less than 1.9.5-4

CVE-2024-24786 affecting package packer for versions less than 1.9.5-4. A patched version of the package is available...

CVE-2025-21613 affecting package packer for versions less than 1.9.5-7

CVE-2025-21613 affecting package packer for versions less than 1.9.5-7. An upgraded version of the package is available that resolves this issue...

CVE-2025-11065 affecting package packer for versions less than 1.9.5-18

CVE-2025-11065 affecting package packer for versions less than 1.9.5-18. A patched version of the package is available...

CVE-2025-47913 affecting package packer for versions less than 1.9.5-16

CVE-2025-47913 affecting package packer for versions less than 1.9.5-16. A patched version of the package is available...

CVE-2024-45337 affecting package packer for versions less than 1.9.5-5

CVE-2024-45337 affecting package packer for versions less than 1.9.5-5. A patched version of the package is available...

CVE-2024-45338 affecting package packer for versions less than 1.9.5-6

CVE-2024-45338 affecting package packer for versions less than 1.9.5-6. A patched version of the package is available...

CBL Mariner 2.0 Security Update: cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter (CVE-2023-3978)

The version of cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3978 advisory. - Text nodes not in the HTML namespace ar...

AZL-42874 CVE-2024-6104 affecting package packer for versions less than 1.9.5-2

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

AZL-42943 CVE-2024-6104 affecting package packer for versions less than 1.9.5-2

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

CVE-2023-45288 affecting package packer for versions less than 1.10.1-2

CVE-2023-45288 affecting package packer for versions less than 1.10.1-2. A patched version of the package is available...

Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters

Cybersecurity researchers have warned of an ongoing cryptojacking campaign targeting misconfigured Kubernetes clusters to mine Dero cryptocurrency. Cloud security firm Wiz, which shed light on the activity, said it's an updated variant of a financially motivated operation that was first documente...

Hackers Exploit Legitimate Packer Software to Spread Malware Undetected

Threat actors are increasingly abusing legitimate and commercially available packer software such as BoxedApp to evade detection and distribute malware such as remote access trojans and information stealers. "The majority of the attributed malicious samples targeted financial institutions and...