GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, newrelic-infrastructure-agent, crossplane-provider-gcp, slsa-verifier, rancher-helm, cert-manager, telegraf, falcoctl, step-kms-plugin, apko, kube-fluentd-operator, docker-cli-buildx, terraform-provider-time, cue, argo-workflow...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: runc, telegraf, croc, rancher-helm, external-secrets-operator, cilium-cli, argo-cd, nerdctl, minio, headlamp, bento, fuse-overlayfs-snapshotter, mattermost, gitness, aactl, bom, ferretdb, osv-scanner, prometheus, src, opensearch-k8s-operator,...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: runc, telegraf, croc, rancher-helm, external-secrets-operator, cilium-cli, argo-cd, nerdctl, minio, headlamp, bento, fuse-overlayfs-snapshotter, mattermost, gitness, aactl, bom, ferretdb, osv-scanner, prometheus, src, opensearch-k8s-operator,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: slsa-verifier, restic, jaeger, azure-workload-identity-webhook, gogatekeeper, lazygit, capslock, karpenter, mockgen, go-md2man, timescaledb-parallel-copy, container-object-storage-interface, vault-benchmark, amass, gcp-compute-persistent-disk-csi-driver, kubeflow,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: slsa-verifier, restic, jaeger, azure-workload-identity-webhook, gogatekeeper, lazygit, capslock, karpenter, mockgen, go-md2man, timescaledb-parallel-copy, container-object-storage-interface, vault-benchmark, amass, gcp-compute-persistent-disk-csi-driver, kubeflow,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: telegraf, slsa-verifier, crossplane-provider-gcp, rancher-helm, kubelet-csr-approver, conjur-cli, step-kms-plugin, pvc-autoresizer, restic, azure-workload-identity-webhook, terraform-provider-time, gogatekeeper, lazygit, fuse-overlayfs-snapshotter, mattermost,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: telegraf, slsa-verifier, crossplane-provider-gcp, rancher-helm, kubelet-csr-approver, conjur-cli, step-kms-plugin, pvc-autoresizer, restic, azure-workload-identity-webhook, terraform-provider-time, gogatekeeper, lazygit, fuse-overlayfs-snapshotter, mattermost,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: telegraf, slsa-verifier, crossplane-provider-gcp, rancher-helm, kubelet-csr-approver, conjur-cli, step-kms-plugin, pvc-autoresizer, restic, azure-workload-identity-webhook, terraform-provider-time, gogatekeeper, lazygit, fuse-overlayfs-snapshotter, mattermost,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: slsa-verifier, restic, jaeger, azure-workload-identity-webhook, gogatekeeper, lazygit, capslock, karpenter, mockgen, go-md2man, timescaledb-parallel-copy, container-object-storage-interface, vault-benchmark, amass, gcp-compute-persistent-disk-csi-driver, kubeflow,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: slsa-verifier, restic, jaeger, azure-workload-identity-webhook, gogatekeeper, lazygit, capslock, karpenter, mockgen, go-md2man, timescaledb-parallel-copy, container-object-storage-interface, vault-benchmark, amass, gcp-compute-persistent-disk-csi-driver, kubeflow,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: telegraf, slsa-verifier, crossplane-provider-gcp, rancher-helm, kubelet-csr-approver, conjur-cli, step-kms-plugin, pvc-autoresizer, restic, azure-workload-identity-webhook, terraform-provider-time, gogatekeeper, lazygit, fuse-overlayfs-snapshotter, mattermost,...

CVE-2024-52282 Rancher Helm Applications may have sensitive values leaked

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with GET access to the Rancher Manager Apps Catalog to read any sensitive information that are contained within the Apps’ values. Additionally, the same information leaks into auditing lo...