1849 matches found
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: CVE-2024-45337: golang.org/x/crypto/ssh: Fixed misuse of ServerConfig.PublicKeyCallback leading to authorization bypass bsc1234563. Other fixes: - Updated to version 20250327.01 bsc1239763, bsc1239866 Remove error messages from...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: hydra, policy-controller, timestamp-authority, opentofu, ksops, kaniko, crossplane-provider-azure-storage, kubernetes-dashboard-auth, kyverno-notation-aws, octo-sts, sigstore-scaffolding, jitsucom-bulker, splunk-otel-collector, zot, fluent-bit-plugin-loki, seaweedfs,...
CVE-2024-9070 Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
CVE-2024-9070 Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
CVE-2024-9070
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
PT-2025-12264
Name of the Vulnerable Software and Affected Versions bentoml/bentoml versions prior to 1.3.4.post1 Description A deserialization issue exists in the BentoML runner server. By configuring specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm...
CVE-2024-9070: Deserialization of Untrusted Data
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
forgejo-runner-6.2.2-3.1 on GA media (moderate)
forgejo-runner-6.2.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:14881-1 Rating: moderate Cross-References: CVE-2025-22869 CVSS scores: CVE-2025-22869 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 SUSE : 8.2...
GHSA-WPXF-3MM2-76F8 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-G5QP-3JX2-P69R vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-G5QP-3JX2-P69R vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
GHSA-WPXF-3MM2-76F8 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
OPENSUSE-SU-2025:14881-1 forgejo-runner-6.2.2-3.1 on GA media
These are all security issues fixed in the forgejo-runner-6.2.2-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-0475 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2025-0475 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
CVE-2024-8186 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2024-8186 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: policy-controller, ini-file, wazero, crossplane-provider-keycloak, temporal-ui-server, oras, golangci-lint, cni-plugins, postgres-operator, direnv, helm-push, multus-cni, flux, nri-rabbitmq, gostatsd, k8s-device-plugin, metacontroller, containerd, dagdotdev, dockeriz...