Admin Bar & Dashboard Access Control Security Vulnerabilities

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kots, datadog-agent, tigera-operator, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, boring-registry, tekton-pipelines, prometheus-nats-exporter, grpc-health-probe, fuse-overlayfs-snapshotter, kuberay-operator,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: datadog-agent, dataplaneapi, cluster-api-controller, tekton-pipelines, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, gitlab-logger, dynamic-localpv-provisioner, spark-operator, goreleaser, nri-rabbitmq, bom, k8sgpt, rclone, neuvector-scanner,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: tigera-operator, jitsucom-bulker, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, boring-registry, s5cmd, prometheus-nats-exporter, tekton-pipelines, fuse-overlayfs-snapshotter, crossplane-provider-gcp,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: tigera-operator, jitsucom-bulker, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, boring-registry, s5cmd, prometheus-nats-exporter, tekton-pipelines, fuse-overlayfs-snapshotter, crossplane-provider-gcp,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, scorecard, slsa-verifier, gobuster, influx, ip-masq-agent, sops, ctop, sbom-scorecard, metrics-server, cass-operator, configmap-reload, wait-for-port, aactl, k3d, go-md2man, gosu, local-path-provisioner, mage, petname, prometheus-bind-exporter,....

CVE-2023-2253 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, kpt, bom, aactl,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: kots, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, gobuster, fuse-overlayfs-snapshotter, kubernetes-csi-node-driver-registrar, prometheus-alertmanager, aws-ebs-csi-driver, metrics-server, kubewatch,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: kots, tigera-operator, kubernetes-dashboard, boring-registry, tekton-pipelines, gobuster, prometheus-nats-exporter, grpc-health-probe, prometheus-alertmanager, metrics-server, kubewatch, prometheus-mongodb-exporter, opentofu, kube-rbac-proxy, mongo-tools, cosign,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kots, datadog-agent, tigera-operator, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, boring-registry, tekton-pipelines, prometheus-nats-exporter, grpc-health-probe, fuse-overlayfs-snapshotter, kuberay-operator,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: tigera-operator, jitsucom-bulker, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, boring-registry, s5cmd, prometheus-nats-exporter, tekton-pipelines, fuse-overlayfs-snapshotter, crossplane-provider-gcp,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kots, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, gobuster, fuse-overlayfs-snapshotter, kubernetes-csi-node-driver-registrar, prometheus-alertmanager, aws-ebs-csi-driver, metrics-server, kubewatch,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: datadog-agent, dataplaneapi, cluster-api-controller, tekton-pipelines, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, gitlab-logger, dynamic-localpv-provisioner, spark-operator, goreleaser, nri-rabbitmq, bom, k8sgpt, rclone, neuvector-scanner,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: smarter-device-manager, scorecard, slsa-verifier, gobuster, influx, ip-masq-agent, sops, ctop, sbom-scorecard, metrics-server, cass-operator, configmap-reload, wait-for-port, aactl, k3d, go-md2man, gosu, local-path-provisioner, mage, petname, prometheus-bind-exporter,....

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, scorecard, slsa-verifier, gobuster, influx, ip-masq-agent, sops, ctop, sbom-scorecard, metrics-server, cass-operator, configmap-reload, wait-for-port, aactl, k3d, go-md2man, gosu, local-path-provisioner, mage, petname, prometheus-bind-exporter,....

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, scorecard, slsa-verifier, gobuster, influx, ip-masq-agent, sops, ctop, sbom-scorecard, metrics-server, cass-operator, configmap-reload, wait-for-port, aactl, k3d, go-md2man, gosu, local-path-provisioner, mage, petname, prometheus-bind-exporter,....

GHSA-HQXW-F8MX-CPMW vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, kpt, bom, aactl,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kots, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, gobuster, fuse-overlayfs-snapshotter, kubernetes-csi-node-driver-registrar, prometheus-alertmanager, aws-ebs-csi-driver, metrics-server, kubewatch,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: kots, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, gobuster, fuse-overlayfs-snapshotter, kubernetes-csi-node-driver-registrar, prometheus-alertmanager, aws-ebs-csi-driver, metrics-server, kubewatch,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: kots, tigera-operator, kubernetes-dashboard, boring-registry, tekton-pipelines, gobuster, prometheus-nats-exporter, grpc-health-probe, prometheus-alertmanager, metrics-server, kubewatch, prometheus-mongodb-exporter, opentofu, kube-rbac-proxy, mongo-tools, cosign,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: tigera-operator, jitsucom-bulker, kubernetes-dashboard, metacontroller, flux-notification-controller, pulumi-language-yaml, boring-registry, s5cmd, prometheus-nats-exporter, tekton-pipelines, fuse-overlayfs-snapshotter, crossplane-provider-gcp,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, dataplaneapi, kubernetes-dashboard, cluster-api-controller, vexctl, pulumi-language-yaml, nri-couchbase, gobuster, s5cmd, fuse-overlayfs-snapshotter, kuberay-operator, kubernetes-csi-node-driver-registrar, prometheus-alertmanager,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, tekton-pipelines, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, docker, aws-flb-kinesis-fips, azure-aad-pod-identity-mic, dynamic-localpv-provisioner, cilium, goreleaser, spark-operator, k8sgpt,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, spark-operator, goreleaser,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, spark-operator, goreleaser,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, spark-operator, goreleaser,...

GHSA-HQXW-F8MX-CPMW vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, flux-image-reflector-controller, prometheus, kubernetes-fips, kpt, bom, aactl, traefik,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: keda-fips, tekton-pipelines, kubernetes-csi-livenessprobe-fips, extism, aws-flb-kinesis-fips, azure-aad-pod-identity-mic, cert-manager-webhook-pdns-fips, dynamic-localpv-provisioner, spark-operator, bom, karpenter-fips, k8sgpt, rclone, neuvector-scanner, cue,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, cert-manager-fips, vault-k8s-fips, kots, kubernetes-dashboard, metacontroller, flux-kustomize-controller-0.37, flux-notification-controller, pulumi-language-yaml, bank-vaults-fips, gobuster, kubernetes-csi-external-resizer-fips,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, tigera-operator, bank-vaults-fips, gobuster, aws-ebs-csi-driver, metrics-server, configmap-reload, kubernetes-csi-livenessprobe-fips, kubernetes-csi-node-driver-registrar-fips, gosu, gitlab-logger, nri-discovery-kubernetes, goreleaser,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, tekton-pipelines, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, tekton-pipelines, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, docker, aws-flb-kinesis-fips, azure-aad-pod-identity-mic, dynamic-localpv-provisioner, cilium, goreleaser, spark-operator, k8sgpt,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, spark-operator, goreleaser,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, spark-operator, goreleaser,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, spark-operator, goreleaser,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, tigera-operator, bank-vaults-fips, gobuster, aws-ebs-csi-driver, metrics-server, configmap-reload, kubernetes-csi-livenessprobe-fips, kubernetes-csi-node-driver-registrar-fips, gosu, gitlab-logger, nri-discovery-kubernetes, goreleaser,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, tekton-pipelines, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: keda-fips, tekton-pipelines, kubernetes-csi-livenessprobe-fips, extism, aws-flb-kinesis-fips, azure-aad-pod-identity-mic, cert-manager-webhook-pdns-fips, dynamic-localpv-provisioner, spark-operator, bom, karpenter-fips, k8sgpt, rclone, neuvector-scanner, cue,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, spark-operator, goreleaser,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, spark-operator, goreleaser,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: keda-fips, datadog-agent, dataplaneapi, cluster-api-controller, gobuster, kubernetes-csi-node-driver-registrar, configmap-reload, kubernetes-csi-livenessprobe-fips, gitlab-logger, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, spark-operator, goreleaser,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, tigera-operator, bank-vaults-fips, gobuster, aws-ebs-csi-driver, metrics-server, configmap-reload, kubernetes-csi-livenessprobe-fips, kubernetes-csi-node-driver-registrar-fips, gosu, gitlab-logger, nri-discovery-kubernetes, goreleaser,...