EUVD-2022-5492

Malicious code in bioql PyPI...

EUVD-2024-30725

Malicious code in bioql PyPI...

CLSA-2025-1757962152 libreswan: Fix of CVE-2023-38712

CVE-2023-38712: fix a NULL pointer dereference caused by a duplicated Delete/Notify message which causes the pluto daemon to crash and restart...

Linux Distros Unpatched Vulnerability : CVE-2023-30570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. The...

pluto-5.22.5-1.1 on GA media (moderate)

pluto-5.22.5-1.1 on GA media Announcement ID: openSUSE-SU-2025:15466-1 Rating: moderate Cross-References: CVE-2025-47907 CVSS scores: CVE-2025-47907 SUSE : 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2025-47907 SUSE : 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:15465-1 pluto-5.22.5-1.1 on GA media

These are all security issues fixed in the pluto-5.22.5-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2020-1763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k8sgpt, cerbos, kargo, k9s, kubescape, tw, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy, chart-testing, helm-push, cilium-cli,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k8sgpt, cerbos, kargo, k9s, kubescape, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy, chart-testing, helm-push, cilium-cli,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k8sgpt, cerbos, kargo, k9s, kubescape, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy, chart-testing, helm-push, cilium-cli,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k8sgpt, cerbos, kargo, k9s, kubescape, tw, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy, chart-testing, helm-push, cilium-cli,...

OPENSUSE-SU-2025:15184-1 pluto-5.21.7-1.1 on GA media

These are all security issues fixed in the pluto-5.21.7-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-32973

Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. In affected versions an attacker with the ability to actively intercept network traffic would be able to use a specifically-crafted certificate to fool Pluto into trusting it to be the intended remote for the TLS session...

CVE-2021-36739

The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting XSS attacks...

CVE-2021-36737

The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact...

CVE-2021-36738

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k9s, kubescape, tw, k8ssandra-client, zot, pluto, cert-manager-cmctl, flux-source-controller, trivy, kots, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, cluster-api-helm-controller, rancher-helm, helm-docs...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k9s, kubescape, tw, k8ssandra-client, zot, pluto, cert-manager-cmctl, flux-source-controller, trivy, kots, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, cluster-api-helm-controller, rancher-helm, helm-docs...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k9s, kubescape, tw, k8ssandra-client, zot, pluto, cert-manager-cmctl, flux-source-controller, trivy, kots, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, cluster-api-helm-controller, rancher-helm, helm-docs...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k9s, kubescape, tw, k8ssandra-client, zot, pluto, cert-manager-cmctl, flux-source-controller, trivy, kots, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, cluster-api-helm-controller, rancher-helm, helm-docs...