GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, local-path-provisioner, promxy, ratify-fips, cluster-api-gcp-controller-fips, kube-logging-logging-operator, kube-logging-operator-custom-runner, falco-exporter, boring-registry, amazon-k8s-cni-fips, kubeflow,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, local-path-provisioner, promxy, ratify-fips, cluster-api-gcp-controller-fips, kube-logging-logging-operator, kube-logging-operator-custom-runner, falco-exporter, boring-registry, amazon-k8s-cni-fips, kubeflow,...

CVE-2025-22872 affecting package prometheus-adapter for versions less than 0.12.0-3

CVE-2025-22872 affecting package prometheus-adapter for versions less than 0.12.0-3. A patched version of the package is available...

AZL-60550 CVE-2025-22872 affecting package prometheus-adapter for versions less than 0.12.0-3

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, local-path-provisioner, opa-fips, flux-helm-controller, grafana-agent-operator, crossplane-provider-aws-firehose, kube-logging-logging-operator, kubernetes-fips, seaweedfs, boring-registry, external-secrets-fips, mailpit,...

GHSA-J7VJ-RW65-4V26 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, local-path-provisioner, opa-fips, flux-helm-controller, grafana-agent-operator, crossplane-provider-aws-firehose, kube-logging-logging-operator, kubernetes-fips, seaweedfs, boring-registry, external-secrets-fips, mailpit,...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, promxy, flux-helm-controller, kube-logging-logging-operator, prometheus-operator-fips, kubernetes-fips, docker-compose-fips, falco-exporter, boring-registry, amazon-k8s-cni-fips, external-secrets-fips, yq-fips,...

CVE-2022-3162 affecting package prometheus-adapter for versions less than 0.10.0-17

CVE-2022-3162 affecting package prometheus-adapter for versions less than 0.10.0-17. A patched version of the package is available...

Azure Linux 3.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.12.0-2

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.12.0-2. A patched version of the package is available...

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.10.0-16

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.10.0-16. A patched version of the package is available...

AZL-54522 CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.10.0-16

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54398 CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.12.0-2

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2022-32149 affecting package prometheus-adapter for versions less than 0.10.0-14

CVE-2022-32149 affecting package prometheus-adapter for versions less than 0.10.0-14. A patched version of the package is available...

CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-45288 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45142 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-45142 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24791 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, opa-fips, flux-helm-controller, grafana-agent-operator, kube-logging-logging-operator, boring-registry, external-secrets-fips, yq-fips, osv-scanner, crossplane-provider-aws, timestamp-authority, kubernetes-dashboard-metrics-scraper-fips, runc,...