TI-2025-33491 CVE-2025-53547 · GHSA-557j-xg8c-q2mm
Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution
Priority MEDIUM 40
Helm is a package manager for Charts for Kubernetes.
RHSA-2026:2572
Red Hat Advanced Cluster Management for Kubernetes v2.14.2 security update
Released 2026-02-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/config-policy-controller-rhel9 +16
Fixes 7 records
TI-2025-41736 CVE-2025-68156 · GHSA-cfpf-hrx2-8rv6
Expr has Denial of Service via Unbounded Recursion in Builtin Functions
Priority LOW 39
Expr is an expression language and expression evaluation for Go.
TI-2026-17723 CVE-2026-22029 · GHSA-2w69-qvjg-hvjx
React Router vulnerable to XSS via Open Redirects
Priority LOW 38
React Router is a router for React.
TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3
Incorrect results returned from Rows.Scan in database/sql
Priority LOW 31
Cancelling a query (e.g.
TI-2025-06557 CVE-2025-7195 · GHSA-856v-8qm2-9wjv
Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
Priority LOW 28
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.
TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27
Unbounded allocation when parsing GNU sparse map in archive/tar
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.