<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 11:48:56 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-12401 — Cert-manager: potential dos when parsing specially crafted pem inputs</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-12401</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; cert-manager, Red Hat cert-manager Operator for Red Hat OpenShift, Red Hat Cryostat 3, Red Hat Multicluster Engine for Kubernetes, Red Hat OpenShift Serverless, Red Hat Connectivity Link 1, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4, Red Hat OpenShift GitOps&lt;/p&gt;
&lt;p&gt;A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; cert-manager, Red Hat cert-manager Operator for Red Hat OpenShift, Red Hat Cryostat 3, Red Hat Multicluster Engine for Kubernetes, Red Hat OpenShift Serverless, Red Hat Connectivity Link 1, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4, Red Hat OpenShift GitOps&lt;/p&gt;
&lt;p&gt;A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-12401</guid>
    </item>
  </channel>
</rss>
