GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, spark-operator, configmap-reload, falcoctl, metacontroller, ini-file, vt-cli, nsc, skaffold, mongo-tools, sonobuoy, go-bindata, falcosidekick, kube-bench, mockgen, octo-sts, kubecolor, kubernetes-csi-external-attacher, envconsul, extism, pguse...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, spark-operator, configmap-reload, falcoctl, metacontroller, ini-file, vt-cli, nsc, skaffold, mongo-tools, sonobuoy, go-bindata, falcosidekick, kube-bench, mockgen, octo-sts, kubecolor, kubernetes-csi-external-attacher, envconsul, extism, pguse...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: smarter-device-manager, spark-operator, configmap-reload, falcoctl, metacontroller, ini-file, vt-cli, nsc, skaffold, mongo-tools, sonobuoy, go-bindata, falcosidekick, kube-bench, mockgen, octo-sts, kubecolor, kubernetes-csi-external-attacher, envconsul, extism, pguse...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, spark-operator, configmap-reload, falcoctl, metacontroller, ini-file, vt-cli, nsc, skaffold, mongo-tools, sonobuoy, go-bindata, falcosidekick, kube-bench, mockgen, octo-sts, kubecolor, kubernetes-csi-external-attacher, envconsul, extism, pguse...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: glow, beats-fips, prometheus-mysqld-exporter-fips, aws-iam-authenticator-fips, k6-fips, docker-credential-ecr-login, sonobuoy-fips, maru, linkerd2-cni-plugin, pulumi-kubernetes-operator, kapp-fips, cloud-provider-aws-fips, yunikorn-web, nats-top-fips, tigera-operator...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: glow, beats-fips, prometheus-mysqld-exporter-fips, aws-iam-authenticator-fips, k6-fips, docker-credential-ecr-login, sonobuoy-fips, maru, linkerd2-cni-plugin, pulumi-kubernetes-operator, kapp-fips, cloud-provider-aws-fips, yunikorn-web, nats-top-fips, tigera-operator...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: glow, beats-fips, prometheus-mysqld-exporter-fips, aws-iam-authenticator-fips, k6-fips, docker-credential-ecr-login, sonobuoy-fips, maru, linkerd2-cni-plugin, pulumi-kubernetes-operator, kapp-fips, cloud-provider-aws-fips, yunikorn-web, nats-top-fips, tigera-operator...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: glow, beats-fips, prometheus-mysqld-exporter-fips, aws-iam-authenticator-fips, k6-fips, docker-credential-ecr-login, sonobuoy-fips, maru, linkerd2-cni-plugin, pulumi-kubernetes-operator, kapp-fips, cloud-provider-aws-fips, yunikorn-web, nats-top-fips, tigera-operator...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: glow, beats-fips, prometheus-mysqld-exporter-fips, aws-iam-authenticator-fips, k6-fips, docker-credential-ecr-login, sonobuoy-fips, maru, linkerd2-cni-plugin, pulumi-kubernetes-operator, kapp-fips, cloud-provider-aws-fips, yunikorn-web, nats-top-fips, tigera-operator...

GHSA-F5P4-P5Q5-JV3H Contrast has insecure LUKS2 persistent storage partitions may be opened and used

Summary A malicious host may provide a crafted LUKS2 volume to a Contrast pod VM that uses the secure persistent volume feature. The guest will open the volume and write secret data using a volume key known to the attacker. LUKS2 volume metadata is a not authenticated and b supports null...

EUVD-2025-36503

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

CVE-2025-12103

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

CVE-2025-12103

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

CVE-2025-12103

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role trustyai-service-operator-lmeval-user-role and a CRB...

Red Hat OpenShift AI 安全漏洞

Red Hat OpenShift AI is an AI-oriented lifecycle management platform from Red Hat USA. A security vulnerability exists in Red Hat OpenShift AI that stems from a TrustyAI component that grants all service accounts and users on the cluster permission to obtain, list, and monitor any pod in any...

GHSA-C2HV-4PFJ-MM2R Argo Workflow may expose artifact repository credentials

Summary An attacker who has permissions to read logs from pods in a namespace with Argo Workflow can read workflow-controller logs and get credentials to the artifact repository. Details An attacker, by reading the logs of the workflow controller pod, can access the artifact repository, and steal...

Argo Workflow may expose artifact repository credentials

Summary An attacker who has permissions to read logs from pods in a namespace with Argo Workflow can read workflow-controller logs and get credentials to the artifact repository. Details An attacker, by reading the logs of the workflow controller pod, can access the artifact repository, and steal...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials due to workflow-controller logging configuration with credentials in plaintext. An attacker can access sensitive credentials by reading pod logs if they have permissions to view logs in the affected...

PT-2025-50230

Name of the Vulnerable Software and Affected Versions Argo Workflows versions 3.6.13 and below Argo Workflows versions 3.7.0 through 3.7.4 Description Argo Workflows, a container-native workflow engine for Kubernetes, has an issue with unsafe untar code that improperly handles symbolic links with...

[SECURITY] Fedora 42 Update: oci-seccomp-bpf-hook-1.2.10-9.fc42

OCI Hook to generate seccomp json files based on EBF syscalls used by contain er oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...