Important: Red Hat Security Advisory: RHTAS 1.3.1 - Tech Preview Release Of the Policy Controller Operator

The Tech Preview release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.15, 4.16,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cilium, knative-serving, kyverno-fips, sftpgo-plugin-eventstore, undock, redka, ytt, aws-iam-authenticator, consul, aws-flb-firehose, trust-manager, gatekeeper-fips, extism, sftpgo-plugin-eventsearch, minio-operator, kots, fluxcd-kustomize-mutating-webhook,...

CVE-2025-46569 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, conftest, cosign, policy-controller, trivy, tfsec, kots, witness, spire-server...

GHSA-6M8W-JC87-6CR7 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, conftest, cosign, policy-controller, trivy, tfsec, kots, witness, spire-server...

GHSA-888H-RM2R-VRC7 vulnerabilities

Vulnerabilities for packages: policy-controller, kind, kubeflow-katib...

GHSA-68G3-2P3G-W9PQ vulnerabilities

Vulnerabilities for packages: policy-controller, kind, kubeflow-katib...

GHSA-RXX3-4978-3CC9 vulnerabilities

Vulnerabilities for packages: policy-controller, kind, kubeflow-katib...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: delve, sftpgo-plugin-kms, flannel-cni-plugin, temporal-ui-server, neuvector-sigstore-interface, git-sync, minify, git-lfs, kubernetes-csi-driver-hostpath, flannel, nginx-prometheus-exporter, rancher-loglevel, cass-operator, kubernetes-csi-livenessprobe, tflint,...

GHSA-888H-RM2R-VRC7 vulnerabilities

Vulnerabilities for packages: kind, policy-controller, kubeflow-katib...

GHSA-RXX3-4978-3CC9 vulnerabilities

Vulnerabilities for packages: kind, policy-controller, kubeflow-katib...

GHSA-4F8R-QQR9-FQ8J vulnerabilities

Vulnerabilities for packages: gh, spire-server, apko, trivy, rekor, policy-controller-fips, flux-source-controller-fips, kubescape, slsa-verifier, zarf, tekton-chains-fips, tekton-chains, policy-controller, tkn, spire-server-fips, wolfictl, neuvector-sigstore-interface, falcoctl-fips, melange,...

CVE-2024-47534 vulnerabilities

Vulnerabilities for packages: gh, spire-server, apko, trivy, rekor, policy-controller-fips, flux-source-controller-fips, kubescape, slsa-verifier, zarf, tekton-chains-fips, tekton-chains, policy-controller, tkn, spire-server-fips, wolfictl, neuvector-sigstore-interface, falcoctl-fips, melange,...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: conftest, cosign, policy-controller, zot, tfsec, kubescape, k8sgpt, opa, snyk-cli, zarf, kots, spire-server...

CVE-2024-8260 vulnerabilities

Vulnerabilities for packages: conftest, cosign, policy-controller, zot, tfsec, kubescape, k8sgpt, opa, snyk-cli, zarf, kots, spire-server...

Cisco Application Policy Infrastructure Controller 安全漏洞

Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. The Cisco Application Policy Infrastructure Controller suffers from an Access Control Error vulnerability that stems from improper access control when using...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: up, sops, hugo, thanos, grafana-agent-operator, secrets-store-csi-driver-provider-azure, timestamp-authority, falcoctl, zarf, fulcio, hugo-extended, ksops, cosign, restic, bank-vaults, opentelemetry-collector-contrib, step-ca, argo-events, cortex,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: vexctl, frp, sops, temporal-ui-server, flux-source-controller, wolfictl, minio, timestamp-authority, falcoctl, kubernetes-dashboard, zarf, fulcio, dgraph, nerdctl, cloudflared, cosign, skaffold, bank-vaults, step-ca, gomplate, tkn, temporal, apko, kots, spire-server,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: scorecard, terraform-provider-google, bank-vaults, mc-fips, crossplane-provider-aws-elasticache, protoc-gen-go-grpc, prometheus-statsd-exporter, hubble-ui, capslock, trust-manager, prometheus-adapter-fips, nats, crossplane-provider-aws-memorydb,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, scorecard, docker-credential-gcr, helm, dagger, helm-operator, k3s, ko-fips, kargo, loki, argo-workflows, timoni, trivy, kubeflow-katib, helm-fips, bom, ctop, policy-controller-fips, kubescape, buildkitd, slsa-verifier, flux-helm-controller,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, scorecard, docker-credential-gcr, helm, dagger, helm-operator, k3s, ko-fips, kargo, loki, argo-workflows, timoni, trivy, kubeflow-katib, helm-fips, bom, ctop, policy-controller-fips, kubescape, buildkitd, slsa-verifier, flux-helm-controller,...