Drupal Simple multi step form module < 2.0.0 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Ide Braakman idebr in WordPress Module Simple multi step form versions 2.0.0...

JLSEC-2025-197 GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a...

GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: velero, nfpm, sbom-scorecard, kyverno-policy-reporter-ui, local-path-provisioner, grpcurl, istio, shfmt, wait-for-port, mage, harbor-registry, tempo, kubernetes-csi-driver-hostpath, mockery, ferretdb, dfc, spire-controller-manager, gcsfuse, nuclei, slsa-verifier,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: velero, kube-state-metrics, sbom-scorecard, sealed-secrets, sops, falcoctl, local-path-provisioner, kubernetes-dashboard-web, yunikorn-web, terraform-provider-random, kratos, docker-cli-buildx, doppler-kubernetes-operator, openbao-k8s, skaffold, amass, trillian,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: volsync-fips, aws-sigv4-proxy, kubernetes-secret-generator, tekton-pipelines, etcd-fips, kube-arangodb, flux-fips, metrics-server, manifest-tool, portieris, cloud-provider-gcp-cloud-controller-manager-fips, cert-manager-webhook-pdns, prometheus-statsd-exporter, k3d,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: volsync-fips, aws-sigv4-proxy, kubernetes-secret-generator, tekton-pipelines, etcd-fips, kube-arangodb, flux-fips, metrics-server, manifest-tool, portieris, cloud-provider-gcp-cloud-controller-manager-fips, cert-manager-webhook-pdns, prometheus-statsd-exporter, k3d,...