CVE-2023-24538 vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib...

CVE-2023-28842 vulnerabilities

Vulnerabilities for packages: ctop, apko, bom, up, helm, ko, melange...

CVE-2023-28840 vulnerabilities

Vulnerabilities for packages: ctop, apko, bom, up, helm, ko, melange...

CVE-2023-28841 vulnerabilities

Vulnerabilities for packages: ctop, apko, bom, up, helm, ko, melange...

GHSA-232P-VWFF-86MP vulnerabilities

Vulnerabilities for packages: ctop, apko, bom, up, helm, ko, melange...

CVE-2023-0665 vulnerabilities

Vulnerabilities for packages: k3d...

Important: subversion

Issue Overview: A flaw was found in Subversion. When using path-based authorization authz, the helper function detectchanged does not omit potentially sensitive information from log messages. In particular, if a node is copied from a protected location, its copyfrom path the path to the protected...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, kubeflow, dynamic-localpv-provisioner-fips, gke-gcloud-auth-plugin, go, hey, terraform-provider-sendgrid-fips, k3d, dynamic-localpv-provisioner, kubeflow-fips, wireguard-go, terraform-provider-sendgrid, kubeflow-katib, restic, grpcurl...

Malicious code in tpgametoolcontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b92a25f4e1b2b968620dafe084fc061cadadba7cbb3f9d768e3fed308471ffed EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

GHSA-MC8H-8Q98-G5HR vulnerabilities

Vulnerabilities for packages: chaos-tproxy, zellij, cbindgen...

CVE-2023-25656 vulnerabilities

Vulnerabilities for packages: zot...

GHSA-4Q83-7CQ4-P6WG vulnerabilities

Vulnerabilities for packages: pulumi-watch...

CVE-2023-21877 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2023-21835 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2022-41721 vulnerabilities

Vulnerabilities for packages: kyverno...

MGASA-2023-0004 Updated ffmpeg packages fix security vulnerability

An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability. CVE-2022-3109...

GHSA-7RRJ-XR53-82P7 vulnerabilities

Vulnerabilities for packages: pulumi-watch...

GHSA-R9HX-VWMV-Q579 vulnerabilities

Vulnerabilities for packages: pytorch-cuda12, pytorch-cuda-11.8...

CVE-2022-40897 vulnerabilities

Vulnerabilities for packages: pytorch-cuda12, pytorch-cuda-11.8...

rpm bug fix and enhancement update

An update is available for rpm. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The RPM Package Manager RPM is a command-line driven package management system...