Skip to content
OpenAdvisories

Package · Wolfi

helm-set-status

63 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-48978

    oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

    oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to int…

    oras-project oras-go kubescape kots Debian Ubuntu Wolfi Go
  • Low 3.3
    CVE-2025-54410

    Moby's Firewalld reload removes bridge network isolation

    Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld…

    moby moby katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi Go