TI-2025-36412 CVE-2025-58754 · GHSA-4hjh-wcwx-xvwj
Axios is vulnerable to DoS attack through lack of data size check
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
RHSA-2025:22684
Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update
Released 2025-12-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.12 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-must-gather-rhel9 +5
Fixes 7 records
TI-2022-06074 CVE-2022-21698 · GHSA-cg3q-j54f-5p7p
Uncontrolled Resource Consumption in promhttp
Priority MEDIUM 48
client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients.
TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
TI-2025-33491 CVE-2025-53547 · GHSA-557j-xg8c-q2mm
Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution
Priority MEDIUM 40
Helm is a package manager for Charts for Kubernetes.
TI-2025-20001 CVE-2025-27144 · GHSA-c6gw-w398-hv78
Go JOSE's Parsing Vulnerable to Denial of Service
Priority LOW 35
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3
Incorrect results returned from Rows.Scan in database/sql
Priority LOW 31
Cancelling a query (e.g.
TI-2025-06557 CVE-2025-7195 · GHSA-856v-8qm2-9wjv
Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
Priority LOW 28
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.