CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: json-exporter, terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, mongodb-kubernetes-operator-fips, pulumi-language-java, chronyexporter, crossplane-provider-aws-memorydb-fips, oras-fips, yunikorn-web-fips, boring-registry,...

EUVD-2021-16005

Malware in sbrugna...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: op-geth, terraform-provider-azapi-fips, pulumi-language-java, metallb, boring-registry, sigstore-scaffolding-fips, azure-aad-pod-identity-mic, gcp-compute-persistent-disk-csi-driver-fips, docker-cli, docker-fips, gosu-fips, step-ca, kubelet-csr-approver, yunikorn-web...

CVE-2021-29370

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, buildkitd, grafana-operator, helm, kubernetes-dashboard, src, nri-f5, newrelic-infrastructure-agent, metallb, nuclei, kyverno-policy-reporter, go-licenses, regclient, kube-rbac-proxy, nri-haproxy, flux-image-reflector-controller, gobuster...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, buildkitd, grafana-operator, helm, kubernetes-dashboard, src, nri-f5, newrelic-infrastructure-agent, metallb, nuclei, kyverno-policy-reporter, go-licenses, regclient, kube-rbac-proxy, nri-haproxy, flux-image-reflector-controller, gobuster...

Moderate: Red Hat Security Advisory: Cluster Observability Operator 0.4.1

The Cluster Observability Operator is a Kubernetes operator which enables the management of Monitoring/Alerting stacks through Kubernetes CRDs. Cluster Observability Operator Security Fixes: coo-prometheus-container: go-retryablehttp: url might write sensitive information to log file coo-0...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: argo-workflows, sqlpad, buildkitd, tekton-chains, sigstore-scaffolding, velero, spire-server, secrets-store-csi-driver-provider-azure, prometheus-operator, flux-kustomize-controller, grafana-mimir, rclone, flyte, nuclei, wal-g, timestamp-authority, harbor-registry,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: rabbitmq-default-user-credential-updater, eck-operator, crossplane-provider-azure, hubble-ui-backend-fips, helm-push, prometheus-alertmanager-fips, tekton-chains, boring-registry, azure-aad-pod-identity-mic, hcloud, dockerize, falcoctl, aws-efs-csi-driver-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: buildkitd, terraform-provider-sendgrid, grafana-operator, pgpool2exporter, helm, kubernetes-dashboard, certificate-transparency, crossplane-provider-aws-eks, src, gitsign, metallb, crossplane, newrelic-infrastructure-agent, nuclei, zarf, kyverno-policy-reporter, syft...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, hubble-ui-backend-fips, metallb, pulumi-language-java, boring-registry, sigstore-scaffolding-fips, azure-aad-pod-identity-mic, step-ca, trust-manager, cosign-fips, ferretdb, rook, oauth2-proxy, local-path-provisioner,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, buildkitd, grafana-operator, helm, kubernetes-dashboard, src, nri-f5, newrelic-infrastructure-agent, metallb, nuclei, kyverno-policy-reporter, go-licenses, regclient, kube-rbac-proxy, nri-haproxy, flux-image-reflector-controller, gobuster...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: vault-csi-provider, conftest-fips, prometheus-stackdriver-exporter, kiam, kubeflow, up, aws-efs-csi-driver-fips, falcoctl-fips, kubevela, kubernetes-csi-livenessprobe-fips, kubernetes-csi-livenessprobe, spark-operator, kubeflow-fips, scorecard,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, up, buildkitd, aactl, slsa-verifier, scorecard, terraform-provider-sendgrid, kubescape, kubevela, spark-operator, src, kubeflow, k3d, cortex...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: buildkitd, k3s, rancher-webhook, kubernetes, kube-oidc-proxy, rancher-webhook-fips, up, metrics-server-fips, caddy, kubernetes-fips, prometheus-adapter, kubevela...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: buildkitd, k3s, rancher-webhook, kubernetes, kube-oidc-proxy, rancher-webhook-fips, up, metrics-server-fips, caddy, kubernetes-fips, prometheus-adapter, kubevela...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: up, buildkitd, kubevela, kubernetes, caddy, prometheus-adapter, k3s...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, pulumi-language-java, tekton-chains, k3s, azure-aad-pod-identity-mic, haproxy-ingress, falcoctl, aws-efs-csi-driver-fips, thanos-operator, secrets-store-csi-driver-provider-gcp, kubevela, kubernetes-csi-livenessprobe-fips, runc,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, pulumi-language-java, tekton-chains, k3s, azure-aad-pod-identity-mic, haproxy-ingress, falcoctl, aws-efs-csi-driver-fips, thanos-operator, secrets-store-csi-driver-provider-gcp, kubevela, kubernetes-csi-livenessprobe-fips, runc,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: buildkitd, terraform-provider-sendgrid, helm, certificate-transparency, src, newrelic-infrastructure-agent, gobuster, rqlite, cortex, ollama, kots, kubeflow, nginx-mainline, cosign, flux-source-controller, flux-kustomize-controller, aws-efs-csi-driver, kubewatch,...