100 matches found
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-8962: RHODF 4.20.17 release DFBUGS-8003: GSS Rook Ceph metrics are not being scraped, and the...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: velero, sigstore-scaffolding, sops, terragrunt, buildkitd, secrets-store-csi-driver-provider-azure, step, argo-workflows, trivy, flux-image-reflector-controller, rekor, thanos, timestamp-authority, hugo-extended, step-ca, up, pulumi, prometheus-operator, tkn,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-memorydb, kaniko, hubble, src-fingerprint, rancher-agent, bento, crossplane-provider-azure-authorization, sops, gke-gcloud-auth-plugin, spicedb-operator, temporal, newrelic-nri-kube-events, pinact, rancher-helm, vault-k8s, traefik,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure, scorecard, sigstore-scaffolding, sops, src-fingerprint, crossplane-provider-azure-authorization, snyk-cli, terragrunt, k3s, buildkitd, crossplane-provider-azure-sql, neuvector-sigstore-interface, kargo, flux-image-reflector-controller, reko...
CVE-2025-30204 affecting package rook for versions less than 1.6.2-29
CVE-2025-30204 affecting package rook for versions less than 1.6.2-29. A patched version of the package is available...
CVE-2025-11065 affecting package rook for versions less than 1.6.2-29
CVE-2025-11065 affecting package rook for versions less than 1.6.2-29. A patched version of the package is available...
CVE-2026-34986 vulnerabilities
Vulnerabilities for packages: kaniko, scorecard, rancher-agent, bento, sops, nerdctl, task, temporal, traefik, argo-workflows, tempo, hydra, kubo, dagdotdev, src, cert-manager-istio-csr, fulcio, migrate, grpc-health-probe, dgraph, rancher, cloudprober, cosign, sqlexporter, grype, telegraf,...
GHSA-78H2-9FRX-2JM8 vulnerabilities
Vulnerabilities for packages: kaniko, scorecard, rancher-agent, bento, sops, nerdctl, task, temporal, traefik, argo-workflows, tempo, hydra, kubo, dagdotdev, src, cert-manager-istio-csr, fulcio, migrate, grpc-health-probe, dgraph, rancher, cloudprober, cosign, sqlexporter, grype, telegraf,...
AZL-75564 CVE-2025-11065 affecting package rook 1.6.2-27
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
EUVD-2025-117142
Malicious code in querulous-tomato-rook npm...
EUVD-2025-117102
Malicious code in serious-lime-rook npm...
Malicious code in querulous-tomato-rook (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4576a5b87a9b1b10ca144423586d36a7b826df4efe3835bfc69499d18f9034d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-131466 Malicious code in xenial_rook_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618d66353f098af9b749454698a255cc1e7956826bd66587bcf6a1df18fdeb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in breezy_rook_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc2e3ae1960205baa285dfac7aa63000c5d33672f8a1d756a55845f38e8aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-101022
Malicious code in biologicalrookz3n npm...
MAL-2025-125202 Malicious code in biological_rook_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cf57f089a40fafa15de7e4d91a066850ab059ed7cec7292dfa854c6c6697b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-105768
Malicious code in disabledrookz3n npm...
MAL-2025-120143 Malicious code in fresh_rook_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1c0abf961a5672d03d5ec6c2ea73e73b285426eb7c24eb2116b3a1c7b03da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in partial_rook_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19407ce8db6232ab8663e24c638a7f3707b12dd2f254da277d05d46d9ebb556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...