CVE-2025-62375 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains, tekton-chains-fips, tkn-fips...

EUVD-2023-2156

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: wal-g, kubernetes-csi-driver-nfs, delve, cilium-cli, prometheus-operator, ratify, containerd, nodetaint, tkn, dgraph, nginx-prometheus-exporter, rabbitmq-default-user-credential-updater, gptscript, hubble, rabbitmq-cluster-operator, render-template,...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, nri-f5, dapr, kapp, kuberlr, vault, cg, kubeflow-katib, falcoctl, cloud-provider-gcp-cloud-controller-manager, glow, tigera-operator, steampipe, flux, lazydocker, node-problem-detector, blob-csi, witness, chart-testing, aws-application-networking-k8s...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, nri-f5, dapr, kapp, kuberlr, vault, cg, kubeflow-katib, falcoctl, cloud-provider-gcp-cloud-controller-manager, glow, tigera-operator, steampipe, flux, lazydocker, node-problem-detector, blob-csi, witness, chart-testing, aws-application-networking-k8s...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: xeol, harbor, bom, harbor-fips, prometheus, helm-set-status, traefik-fips, gitlab-rails-ce, opentelemetry-operator, newrelic-infrastructure-agent, gatekeeper, kubevirt-cdi-uploadserver, skaffold-fips, rancher-agent, rke2-runtime, promxy-fips, consul-k8s-fips,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: xeol, harbor, bom, harbor-fips, prometheus, helm-set-status, traefik-fips, gitlab-rails-ce, opentelemetry-operator, newrelic-infrastructure-agent, gatekeeper, kubevirt-cdi-uploadserver, skaffold-fips, rancher-agent, rke2-runtime, promxy-fips, consul-k8s-fips,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, kubernetes-dashboard-metrics-scraper-fips, metrics-server-fips, ksops, neuvector-scanner, gotenberg, kaf, tigera-operator, thanos-fips, pulumi-kubernetes-operator, nfs-subdir-external-provisioner, stern, wave-fips, dex-fips,...

Important: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.16.0 release

Red Hat OpenShift Pipelines 1.16.0 has been released. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments...

GHSA-4F8R-QQR9-FQ8J vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, cosign-fips, flux-source-controller-fips, falcoctl, gitsign, slsa-verifier, zarf, falcoctl-fips, neuvector-sigstore-interface-fips, trivy, tkn-fips, vexctl, tekton-chains, cosign, rekor, tkn, tekton-chains-fips, spire-server, zot,...

CVE-2024-47534 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, cosign-fips, flux-source-controller-fips, falcoctl, gitsign, slsa-verifier, zarf, falcoctl-fips, neuvector-sigstore-interface-fips, trivy, tkn-fips, vexctl, tekton-chains, cosign, rekor, tkn, tekton-chains-fips, spire-server, zot,...

Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.15.0 release

Red Hat OpenShift Pipelines 1.15.0 has been released. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: sqlpad, wal-g, rclone, kubescape, argo-events, fluent-bit-plugin-loki, thanos, cortex, prometheus-operator, velero, tkn, rook, py3-cassandra-medusa, hugo-extended, flux-kustomize-controller, argo-workflows, restic, flux-image-reflector-controller, nuclei,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, external-secrets-fips, dex-k8s-authenticator, vertical-pod-autoscaler, docker-credential-ecr-login, kubernetes-dashboard-metrics-scraper-fips, ko-fips, metrics-server-fips, ksops, step-fips, vault, neuvector-scanner, gotenberg,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: kubescape, wolfictl, skaffold, tkn, vexctl, gitsign, policy-controller, flux-source-controller, zot, aactl, tekton-chains, apko, zarf, ko, goreleaser, falcoctl, spire-server, slsa-verifier, melange, neuvector-sigstore-interface...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, goreleaser, ko-fips, falcoctl, gitsign, slsa-verifier, zarf, falcoctl-fips, tkn-fips, vexctl, tekton-chains, tkn, skaffold, tekton-chains-fips, spire-server, zot, apko, flux-source-controller, ko, melange, chainctl, policy-controller,...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: kubescape, wolfictl, skaffold, tkn, vexctl, gitsign, policy-controller, flux-source-controller, zot, aactl, tekton-chains, apko, zarf, ko, goreleaser, falcoctl, spire-server, slsa-verifier, melange, neuvector-sigstore-interface...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, goreleaser, ko-fips, falcoctl, gitsign, slsa-verifier, zarf, falcoctl-fips, tkn-fips, vexctl, tekton-chains, tkn, skaffold, tekton-chains-fips, spire-server, zot, apko, flux-source-controller, ko, melange, chainctl, policy-controller,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: kubescape, wolfictl, skaffold, tkn, vexctl, gitsign, policy-controller, flux-source-controller, zot, aactl, tekton-chains, apko, zarf, ko, goreleaser, falcoctl, spire-server, slsa-verifier, melange, neuvector-sigstore-interface...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, goreleaser, ko-fips, falcoctl, gitsign, slsa-verifier, zarf, falcoctl-fips, tkn-fips, vexctl, tekton-chains, tkn, skaffold, tekton-chains-fips, spire-server, zot, apko, flux-source-controller, ko, melange, chainctl, policy-controller,...