BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, Edge Gateway, FPS, Link Controller, PEM, WebAccelerator) Security Vulnerabilities

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: aactl, tkn, melange, falcoctl, goreleaser, neuvector-sigstore-interface, zarf, zot, gitsign, ko, slsa-verifier, policy-controller, kubescape, skaffold, tekton-chains, flux-source-controller, apko, spire-server, vexctl, falco,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: wireguard-go, aactl, flux-notification-controller, confluent-common-docker, go-md2man, flux-image-reflector-controller, overmind, delve, falcosidekick, mods, aws-ebs-csi-driver, k9s, zot, pulumi-language-yaml, lazygit, docker-credential-acr-env, ko, helm-push,...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: goreleaser, cosign, aactl, tekton-chains, ko, slsa-verifier, policy-controller, tkn, melange, apko, spire-server, kubescape, skaffold,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: calico, grype, wireguard-go, kubevela, prometheus, go-md2man, flux-image-reflector-controller, delve, aws-ebs-csi-driver, consul, bazelisk, nodetaint, pulumi-language-yaml, lazygit, docker-credential-acr-env, regclient, helm-push, slsa-verifier, vt-cli,...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: calico, cluster-autoscaler, spark-operator, ip-masq-agent, kubernetes-dns-node-cache, aws-efs-csi-driver, aws-ebs-csi-driver, prometheus-adapter,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: calico, cluster-autoscaler, spark-operator, ip-masq-agent, kubernetes-dns-node-cache, aws-efs-csi-driver, aws-ebs-csi-driver, prometheus-adapter,...

CVE-2024-26147 vulnerabilities

Vulnerabilities for packages: helm-operator, k9s, eksctl, cert-manager, zarf, zot, helm-push, flux-source-controller, istio-operator, up, k8sgpt, kots, cilium-cli, flux-helm-controller, kubescape, trivy,...

CVE-2023-29405 vulnerabilities

Vulnerabilities for packages: kind, policy-controller,...

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-19

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-19. This CVE either no longer is or was never...

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-19

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-19. This CVE either no longer is or was never...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: helm-operator, k9s, eksctl, cert-manager, zarf, zot, helm-push, flux-source-controller, istio-operator, up, k8sgpt, kots, cilium-cli, flux-helm-controller, kubescape, trivy,...

GHSA-7GPW-8WMC-PM8G vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa,...

CVE-2023-29402 vulnerabilities

Vulnerabilities for packages: kind, policy-controller,...

CVE-2023-29404 vulnerabilities

Vulnerabilities for packages: kind, policy-controller,...

GHSA-68G3-2P3G-W9PQ vulnerabilities

Vulnerabilities for packages: kind, policy-controller,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, vcluster, bazelisk, nodetaint, k9s, neuvector-sigstore-interface, velero-plugin-for-aws, docker-credential-acr-env, ko, helm-push, slsa-verifier, kubecolor, tempo, hey, nri-consul, dockerize, cert-manager, kubernetes-event-exporter,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: aactl, prometheus-bind-exporter, go-md2man, render-template, grpcurl, influx, ctop, cass-operator, gops, goreleaser, helm-push, local-path-provisioner, slsa-verifier, prometheus-stackdriver-exporter, configmap-reload, nri-discovery-kubernetes, cni-plugins, gosu,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: aactl, prometheus-bind-exporter, go-md2man, render-template, grpcurl, influx, ctop, cass-operator, gops, goreleaser, helm-push, local-path-provisioner, slsa-verifier, prometheus-stackdriver-exporter, configmap-reload, nri-discovery-kubernetes, cni-plugins, gosu,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: skopeo, cosign, aactl, tkn, step, melange, tekton-pipelines, weaviate, grafana, istio-pilot-discovery, falcoctl, grpc-health-probe, vault, cilium, goreleaser, zarf, frp, gitsign, ko, slsa-verifier, policy-controller, terragrunt, keda, external-secrets-operator,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: calico, grype, wireguard-go, aactl, prometheus, flux-image-reflector-controller, consul, zot, docker-credential-acr-env, ko, helm-push, slsa-verifier, kubescape, temporal-server, pulumi, dockerize, secrets-store-csi-driver-provider-azure, sigstore-scaffolding,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: aactl, tkn, melange, falcoctl, goreleaser, neuvector-sigstore-interface, zarf, zot, gitsign, ko, slsa-verifier, policy-controller, kubescape, skaffold, tekton-chains, flux-source-controller, apko, spire-server, vexctl, falco,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: wireguard-go, aactl, flux-notification-controller, kubevela, prometheus, flux-image-reflector-controller, consul, aws-ebs-csi-driver, nodetaint, zot, pulumi-language-yaml, kubernetes-csi-livenessprobe, trust-manager, tctl, hey, pulumi, minio, prometheus-operator,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: wireguard-go, aactl, flux-notification-controller, kubevela, prometheus, flux-image-reflector-controller, consul, aws-ebs-csi-driver, nodetaint, zot, pulumi-language-yaml, slsa-verifier, kubernetes-csi-livenessprobe, kubescape, trust-manager, tctl, hey, pulumi, minio,....

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: calico, grype, cosign, aactl, flux-notification-controller, kubevela, buildkitd, helm, prometheus, weaviate, gitlab-pages, secrets-store-csi-driver, goreleaser, pulumi-language-yaml, ko, slsa-verifier, pulumi-kubernetes-operator, conftest, keda,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: calico, grype, wireguard-go, aactl, flux-notification-controller, kubevela, prometheus, dotnet, nodetaint, pulumi-language-yaml, ko, slsa-verifier, kubernetes-csi-livenessprobe, kubescape, tctl, hey, pulumi, minio, sigstore-scaffolding, cert-manager, metacontroller,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: calico, grype, wireguard-go, kubevela, prometheus, go-md2man, flux-image-reflector-controller, delve, aws-ebs-csi-driver, consul, bazelisk, nodetaint, pulumi-language-yaml, lazygit, docker-credential-acr-env, regclient, helm-push, slsa-verifier, vt-cli,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: calico, grype, wireguard-go, kubevela, prometheus, go-md2man, flux-image-reflector-controller, delve, aws-ebs-csi-driver, consul, bazelisk, nodetaint, pulumi-language-yaml, lazygit, docker-credential-acr-env, regclient, helm-push, slsa-verifier, vt-cli,...

CVE-2024-37891 vulnerabilities

Vulnerabilities for packages: ggshield, py3-cassandra-medusa, reflex, mlflow, superset, py3-urllib3, airflow, confluent-docker-utils, dask-gateway, kubeflow-jupyter-web-app, kubeflow-pipelines, az, k8s-sidecar, kubeflow-katib,...

GHSA-MW99-9CHC-XW7R vulnerabilities

Vulnerabilities for packages: kubevela, nuclei, tekton-pipelines, goreleaser, zot, pulumi-language-yaml, gitsign, pulumi-kubernetes-operator, pulumi, src-fingerprint, argo-cd, gomplate, apko, gitness, bom, pulumi-language-java, flux-kustomize-controller, pulumi-language-dotnet, scorecard, kots,...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: aactl, tkn, melange, falcoctl, goreleaser, neuvector-sigstore-interface, zarf, zot, gitsign, ko, slsa-verifier, policy-controller, kubescape, skaffold, tekton-chains, flux-source-controller, apko, spire-server, vexctl, falco,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: aactl, prometheus-bind-exporter, go-md2man, render-template, grpcurl, influx, ctop, cass-operator, gops, goreleaser, helm-push, local-path-provisioner, slsa-verifier, prometheus-stackdriver-exporter, configmap-reload, nri-discovery-kubernetes, cni-plugins, gosu,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: calico, grype, wireguard-go, kubevela, prometheus, go-md2man, flux-image-reflector-controller, delve, aws-ebs-csi-driver, consul, bazelisk, nodetaint, pulumi-language-yaml, lazygit, docker-credential-acr-env, regclient, helm-push, slsa-verifier, vt-cli,...

GHSA-W235-7P84-XX57 vulnerabilities

Vulnerabilities for packages: airflow, dask-gateway,...

GHSA-34JH-P97F-MPXF vulnerabilities

Vulnerabilities for packages: ggshield, py3-cassandra-medusa, reflex, mlflow, superset, py3-urllib3, airflow, confluent-docker-utils, dask-gateway, kubeflow-jupyter-web-app, kubeflow-pipelines, az, k8s-sidecar, kubeflow-katib,...

CVE-2023-49568 vulnerabilities

Vulnerabilities for packages: kubevela, nuclei, tekton-pipelines, goreleaser, zot, pulumi-language-yaml, gitsign, pulumi-kubernetes-operator, pulumi, src-fingerprint, argo-cd, gomplate, apko, gitness, bom, pulumi-language-java, flux-kustomize-controller, pulumi-language-dotnet, scorecard, kots,...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: calico, node-feature-discovery, cluster-autoscaler, local-static-provisioner, spark-operator, ip-masq-agent, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, kubernetes, aws-ebs-csi-driver,...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: skopeo, grype, buildkitd, ctop, ingress-nginx-controller, kaniko, kubernetes, cadvisor, k9s, zarf, zot, kubescape, skaffold, runc, nerdctl, trivy, telegraf, k3d, syft, docker, k3s, nvidia-device-plugin, newrelic-infrastructure-agent, kots, wolfictl,...

GHSA-V845-JXX5-VC9F vulnerabilities

Vulnerabilities for packages: py3-urllib3, dask-gateway, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, k8s-sidecar,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: wireguard-go, aactl, flux-notification-controller, confluent-common-docker, go-md2man, flux-image-reflector-controller, overmind, delve, falcosidekick, mods, aws-ebs-csi-driver, k9s, zot, pulumi-language-yaml, lazygit, docker-credential-acr-env, ko, helm-push,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, vcluster, bazelisk, nodetaint, k9s, neuvector-sigstore-interface, velero-plugin-for-aws, docker-credential-acr-env, ko, helm-push, slsa-verifier, kubecolor, tempo, hey, nri-consul, dockerize, cert-manager, kubernetes-event-exporter,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: skopeo, cosign, aactl, filebeat, kubevela, buildkitd, helm, prometheus, flux-image-reflector-controller, tekton-pipelines, gitlab-runner, ctop, docker-credential-gcr, k8sgpt, istio-pilot-discovery, falcoctl, cadvisor, goreleaser, k9s, eksctl, timoni, gitsign, zarf,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: calico, grype, wireguard-go, kubevela, prometheus, go-md2man, flux-image-reflector-controller, delve, aws-ebs-csi-driver, consul, bazelisk, nodetaint, pulumi-language-yaml, lazygit, docker-credential-acr-env, regclient, helm-push, slsa-verifier, vt-cli,...

CVE-2023-43804 vulnerabilities

Vulnerabilities for packages: py3-urllib3, dask-gateway, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, k8s-sidecar,...

CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15

CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15. A patched version of the package is...

CVE-2024-24764

October is a self-hosted CMS platform based on the Laravel PHP Framework. This issue affects authenticated administrators who may be redirected to an untrusted URL using the PageFinder schema. The resolver for the page finder link schema (october://) allowed external links, therefore allowing an...

CVE-2024-24764

October is a self-hosted CMS platform based on the Laravel PHP Framework. This issue affects authenticated administrators who may be redirected to an untrusted URL using the PageFinder schema. The resolver for the page finder link schema (october://) allowed external links, therefore allowing an...

CVE-2024-4869

The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Client-IP’ header in all versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2024-4869

The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Client-IP’ header in all versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2024-24764 October Open Redirect for Administrator Accounts

October is a self-hosted CMS platform based on the Laravel PHP Framework. This issue affects authenticated administrators who may be redirected to an untrusted URL using the PageFinder schema. The resolver for the page finder link schema (october://) allowed external links, therefore allowing an...

CVE-2024-38526 pdoc embeds link to malicious CDN if math mode is enabled

pdoc provides API Documentation for Python Projects. Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc...