CVE-2025-70849

Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST request to the /store endpoint. The application renders uploaded content without a restrictive Content-Security-Policy CSP or adequate Content-Type validation, leading to Stored...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: govulncheck, helm-operator, cluster-autoscaler, conjur-cli, kube-vip-cloud-provider, flux-kustomize-controller, nats-server-config-reloader, pgtimetable, petname, nri-nginx, nginx-prometheus-exporter, litefs, spark-operator, bento, gitlab-runner,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: govulncheck, spqr, ctop, helm-operator, redis-operator, cluster-autoscaler, grafana-rollout-operator, flannel, terraform-mcp-server, tfsec, conjur-cli, kube-logging-operator-custom-runner, ipfs-cluster, ksops, kube-vip-cloud-provider, flux-kustomize-controller,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: govulncheck, helm-operator, cluster-autoscaler, conjur-cli, kube-vip-cloud-provider, flux-kustomize-controller, nats-server-config-reloader, pgtimetable, petname, nri-nginx, nginx-prometheus-exporter, litefs, spark-operator, bento, gitlab-runner,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: govulncheck, spqr, ctop, helm-operator, redis-operator, cluster-autoscaler, grafana-rollout-operator, flannel, terraform-mcp-server, tfsec, conjur-cli, kube-logging-operator-custom-runner, ipfs-cluster, ksops, kube-vip-cloud-provider, flux-kustomize-controller,...