CGA-V428-8CC9-79F8: bento
Unknown
Published Date unknownLast modified Date unknown
Status not reported
The data service did not report a status for this record. Only the available sections are shown.Vulnerability summary
CGA-V428-8CC9-79F8 is a vulnerability in bento with no CVSS score yet.
Overall risk
0/100
0100
Minimal · default modelHow is this calculated?SSVCUnavailableNo CVSS score and no CISA entry. CveMate has too little data to estimate a decision.
CVSS score
Not scored
010
No CVSS score recordedEPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
No timeline events recorded.
Description
No description has been published for this record.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Chainguard200 products
- agentbeat< 9.2.7-r5
- agentbeat-fips< 9.2.7-r6
- auditbeat-8.17< 8.17.10-r14
- auditbeat-8.19< 8.19.14-r3
- auditbeat-9.0< 9.0.8-r14
- auditbeat-9.1< 9.1.10-r10
- auditbeat-9.2< 9.2.8-r3
- auditbeat-9.3< 9.3.3-r4
- auditbeat-fips-8.17< 8.17.10-r13
- bento< 1.19.0-r1
- bento-fips< 1.19.0-r1
- cert-manager-1.19< 1.19.5-r1
- cert-manager-1.20< 1.20.2-r1
- cert-manager-cainjector-1.19< 1.19.5-r1
- cert-manager-cainjector-1.20< 1.20.2-r1
- cert-manager-cainjector-fips-1.19< 1.19.5-r1
- cert-manager-cainjector-fips-1.20< 1.20.2-r1
- cert-manager-cmctl< 2.4.1-r6
- cert-manager-cmctl-fips< 2.4.1-r7
- cert-manager-controller-1.19< 1.19.5-r1
- cert-manager-controller-fips-1.19< 1.19.5-r1
- cert-manager-controller-fips-1.20< 1.20.2-r1
- cert-manager-csi-driver< 0.14.0-r1
- cert-manager-csi-driver-fips< 0.14.0-r1
- cert-manager-fips-1.19< 1.19.5-r1
- cert-manager-fips-1.20< 1.20.2-r1
- cert-manager-google-cas-issuer< 0.11.0-r8
- cert-manager-google-cas-issuer-fips< 0.11.0-r8
- cert-manager-istio-csr< 0.16.0-r8
- cert-manager-istio-csr-fips< 0.16.0-r8
- cert-manager-openshift-routes< 0.9.0-r2
- cert-manager-openshift-routes-fips< 0.9.0-r2
- cert-manager-startupapicheck-1.19< 1.19.5-r1
- cert-manager-startupapicheck-1.20< 1.20.2-r1
- cert-manager-startupapicheck-fips-1.19< 1.19.5-r1
- cert-manager-startupapicheck-fips-1.20< 1.20.2-r1
- cert-manager-webhook-1.19< 1.19.5-r1
- cert-manager-webhook-1.20< 1.20.2-r1
- cert-manager-webhook-fips-1.19< 1.19.5-r1
- cert-manager-webhook-fips-1.20< 1.20.2-r1
- cloudbeat-8.17< 8.17.10-r14
- cloudbeat-8.19< 8.19.13-r11
- cloudbeat-9.0< 9.0.8-r17
- cloudbeat-9.1< 9.1.10-r10
- cloudbeat-9.2< 9.2.7-r7
- cloudbeat-9.3< 9.3.3-r5
- cloudbeat-fips-8.17< 8.17.10-r21
- cloudbeat-fips-8.19< 8.19.13-r10
- cloudbeat-fips-9.0< 9.0.8-r19
- cloudbeat-fips-9.1< 9.1.10-r14
- cloudbeat-fips-9.2< 9.2.7-r11
- cloudbeat-fips-9.3< 9.3.2-r11
- commercial-grafana-11.6< 11.6.16-r0
- commercial-grafana-12.2< 12.2.10-r0
- commercial-grafana-12.3< 12.3.8-r0
- commercial-grafana-12.4< 12.4.5-r0
- dex< 2.45.1-r7
- dex-fips< 2.45.1-r6
- elastic-agent-8.17< 8.17.10-r14
- elastic-agent-8.19< 8.19.14-r3
- elastic-agent-9.0< 9.0.8-r13
- elastic-agent-9.1< 9.1.10-r13
- elastic-agent-9.2< 9.2.8-r2
- elastic-agent-fips-8.17< 8.17.10-r13
- elastic-agent-fips-8.19< 8.19.14-r4
- elastic-agent-fips-9.0< 9.0.8-r14
- elastic-agent-fips-9.1< 9.1.10-r13
- elastic-agent-fips-9.2< 9.2.8-r2
- elastic-otel-collector-9.3< 9.3.3-r2
- elastic-otel-collector-fips-9.3< 9.3.3-r2
- external-secrets-fips< 2.4.0-r1
- external-secrets-operator-2.2< 2.2.0-r5
- external-secrets-operator-2.3< 2.3.0-r3
- external-secrets-operator-2.4< 2.4.0-r1
- external-secrets-operator-fips-2.2< 2.2.0-r5
- external-secrets-operator-fips-2.3< 2.3.0-r2
- external-secrets-operator-fips-2.4< 2.4.0-r1
- filebeat-8.19< 8.19.14-r3
- filebeat-9.1< 9.1.10-r10
- filebeat-9.2< 9.2.8-r3
- filebeat-9.3< 9.3.3-r4
- filebeat-fips-8.19< 8.19.14-r4
- filebeat-fips-9.0< 9.0.8-r16
- filebeat-fips-9.1< 9.1.10-r11
- filebeat-fips-9.2< 9.2.8-r3
- filebeat-fips-9.3< 9.3.3-r4
- flux-2.6< 2.6.4-r21
- flux-2.7< 2.7.5-r15
- flux-2.8< 2.8.6-r1
- flux-fips-2.6< 2.6.4-r20
- flux-fips-2.7< 2.7.5-r14
- flux-fips-2.8< 2.8.6-r1
- flux-source-controller< 1.8.2-r6
- flux-source-controller-fips< 1.8.3-r1
- frp< 0.68.1-r1
- gitea< 1.25.5-r6
- gitea-fips< 1.25.5-r5
- gitlab-runner-18.10< 18.10.1-r5
- gitlab-runner-18.11< 18.11.2-r4
- gitlab-runner-18.9< 18.9.0-r10
- gitlab-runner-fips-18.10< 18.10.1-r5
- gitlab-runner-fips-18.11< 18.11.3-r3
- gitlab-runner-fips-18.9< 18.9.0-r9
- grafana-11.6< 11.6.14.01-r11
- grafana-12.2< 12.2.8.01-r10
- grafana-12.3< 12.3.6.01-r5
- grafana-12.4< 12.4.2-r11
- grafana-13.0< 13.0.1-r4
- grafana-fips-11.6< 11.6.14.01-r5
- grafana-fips-12.2< 12.2.8.01-r4
- grafana-fips-12.3< 12.3.6.01-r4
- grafana-fips-12.4< 12.4.2-r10
- grafana-fips-13.0< 13.0.1-r2
- harbor-2.12< 2.12.4-r44
- harbor-2.13< 2.13.5-r14
- harbor-2.14< 2.14.3-r13
- harbor-fips-2.13< 2.13.5-r14
- harbor-fips-2.14< 2.14.3-r14
- heartbeat-8.19< 8.19.14-r3
- heartbeat-9.0< 9.0.8-r14
- heartbeat-9.1< 9.1.10-r10
- heartbeat-9.2< 9.2.8-r3
- heartbeat-9.3< 9.3.3-r4
- heartbeat-fips-8.17< 8.17.10-r13
- juicefs-1.3< 1.3.1-r22
- k6< 1.7.1-r3
- k6-fips< 1.6.1-r7
- kyverno-1.15< 1.15.3-r14
- kyverno-1.16< 1.16.3-r16
- kyverno-background-controller-1.15< 1.15.3-r14
- kyverno-background-controller-fips-1.15< 1.15.20-r1
- kyverno-background-controller-fips-1.16< 1.16.3-r16
- kyverno-background-controller-fips-1.17< 1.17.1-r15
- kyverno-cleanup-controller-1.15< 1.15.3-r14
- kyverno-cleanup-controller-1.17< 1.17.1-r17
- kyverno-cleanup-controller-fips-1.15< 1.15.20-r1
- kyverno-cleanup-controller-fips-1.16< 1.16.3-r16
- kyverno-cleanup-controller-fips-1.17< 1.17.1-r15
- kyverno-cli-1.15< 1.15.3-r14
- kyverno-cli-1.17< 1.17.1-r17
- kyverno-cli-fips-1.15< 1.15.20-r1
- kyverno-cli-fips-1.17< 1.17.1-r15
- kyverno-fips-1.15< 1.15.20-r1
- kyverno-fips-1.16< 1.16.3-r16
- kyverno-fips-1.17< 1.17.1-r15
- kyverno-init-container-1.15< 1.15.3-r14
- kyverno-init-container-1.17< 1.17.1-r17
- kyverno-init-container-fips-1.16< 1.16.3-r16
- kyverno-init-container-fips-1.17< 1.17.1-r15
- kyverno-notation-aws< 1.1-r51
- kyverno-notation-aws-fips< 1.1-r46
- kyverno-reports-controller-1.15< 1.15.3-r14
- kyverno-reports-controller-1.16< 1.16.3-r16
- kyverno-reports-controller-1.17< 1.17.1-r17
- kyverno-reports-controller-fips-1.16< 1.16.3-r16
- kyverno-reports-controller-fips-1.17< 1.17.1-r15
- ldap2pg< 6.5.1-r1
- metricbeat-8.17< 8.17.10-r14
- metricbeat-8.19< 8.19.14-r3
- metricbeat-9.1< 9.1.10-r10
- metricbeat-9.2< 9.2.8-r3
- metricbeat-9.3< 9.3.3-r4
- metricbeat-fips-8.17< 8.17.10-r13
- minio< 0.20260410.215259-r2
- minio-fips< 0.20260410.215259-r2
- neuvector-controller< 5.5.1-r3
- neuvector-controller-fips< 5.5.0-r5
- neuvector-upgrader< 5.5.1-r3
- neuvector-upgrader-fips< 5.5.0-r5
- nuclei< 3.8.0-r2
- openbao< 2.5.3-r1
- openbao-fips< 2.5.3-r1
- opentofu-1.10< 1.10.9-r12
- opentofu-1.11< 1.11.6-r2
- opentofu-1.9< 1.9.4-r16
- opentofu-fips-1.10< 1.10.9-r12
- opentofu-fips-1.11< 1.11.6-r2
- opentofu-fips-1.9< 1.9.4-r19
- packer< 1.15.2-r0
- packer-fips< 1.15.2-r0
- percona-server-mongodb-operator< 1.22.0-r14
- percona-server-mongodb-operator-fips< 1.22.0-r9
- rancher-2.10< 2.10.11-r12
- rancher-2.11< 2.11.15-r0
- rancher-2.12< 2.12.9-r2
- rancher-2.13< 2.13.5-r2
- rancher-agent-2.10< 2.10.11-r11
- rancher-agent-2.11< 2.11.15-r0
- rancher-agent-2.12< 2.12.9-r4
- rancher-agent-2.13< 2.13.5-r4
- rancher-agent-2.14< 2.14.1-r1
- rancher-webhook-0.10< 0.10.0-r2
- rancher-webhook-0.6< 0.6.12-r8
- rancher-webhook-0.9< 0.9.3-r6
- rancher-webhook-fips-0.10< 0.10.0-r2
- rancher-webhook-fips-0.6< 0.6.12-r8
- rancher-webhook-fips-0.9< 0.9.3-r5
- ratify< 1.4.0-r27
- ratify-fips< 1.4.0-r25
- rclone< 1.73.5-r1
1 vendor · 200 products · Showing 200 of 299
References
0 linksNo references have been published for this record.
Related vulnerabilities
MediumCVE-2025-54410chainguard · aactl +439 moreMoby's Firewalld reload removes bridge network isolationMoby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create iptables rules that isolate bridge networks, allowing any container to access all ports on any other container across different bridge networks on the same host. This breaks network segmentation between containers that should be isolated, creating significant risk in multi-tenant environments. Only containers in --internal networks remain protected.
Workarounds include reloading firewalld and either restarting the docker daemon, re-creating bridge networks, or using rootless mode. Maintainers anticipate a fix for this issue in version 25.0.13.EPSS0.17%MediumCVE-2025-54388chainguard · agentbeat-fips +191 moreMoby's Firewalld reload makes published container ports accessible from remote hostsMoby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules including those created by Docker. While Docker should automatically recreate these rules, versions before 28.3.3 fail to recreate the specific rules that block external access to containers. This means that after a firewalld reload, containers with ports published to localhost (like 127.0.0.1:8080) become accessible from remote machines that have network routing to the Docker bridge, even though they should only be accessible from the host itself. The vulnerability only affects explicitly published ports - unpublished ports remain protected. This issue is fixed in version 28.3.3.EPSS0.25%HighCVE-2025-61726chainguard · aactl +1967 moreMemory exhaustion in query parameter parsing in net/urlThe net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.EPSS2.33%HighCVE-2025-61731chainguard · aactl +1942 moreArbitrary file write using cgo pkg-config directive in cmd/goBuilding a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location.EPSS0.62%MediumCVE-2025-61728chainguard · aactl +1962 moreExcessive CPU consumption when building archive index in archive/ziparchive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.EPSS0.75%HighCVE-2025-61729chainguard · aactl +2590 moreExcessive resource consumption when printing error string for host certificate validation in crypto/x509Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.EPSS0.46%