https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:59:09.376365+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-58366 CVE-2025-58366 — Onyxia private helm repository credentials are leaked through unauthenticated API 2026-10-08T06:59:09.391245+00:00

Affected: InseeFrLab onyxia

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public (unauthenticated) /public/catalogs endpoint.vOnly instances using private helm repositories (i.e setting username & password in the catalogs configuration) are affected. This is fixed in version 4.9.0.