Caddy – Smart Side Cart For WooCommerce Security Vulnerabilities

Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities

Summary IBM Cloud Transformation Advisor has addressed multiple security vulnerabilities listed herein. Vulnerability Details ** CVEID: CVE-2023-49569 DESCRIPTION: **go-git could allow a remote attacker to traverse directories on the system. By sending a specially crafted request using the...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: kubescape, loki, kaniko, tkn, conftest, datadog-agent, spire-server, buildkitd, aactl, buf, grype, goreleaser, dagger, trivy, melange, prometheus, up, wolfictl, telegraf, ctop, syft, kargo, crossplane, docker-compose, cadvisor, zot,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, envoy-ratelimit, falcoctl, nats, trillian, osv-scanner, step-ca, kaniko, aws-efs-csi-driver, thanos, kubernetes-csi-external-provisioner, capslock, k8sgpt, datadog-agent, kots, kubeadm-bootstrap-controller, spicedb, temporal-server,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, envoy-ratelimit, gobuster, nats, trillian, flannel-cni-plugin, bazelisk, aws-efs-csi-driver, thanos, gosu, kubernetes-csi-external-provisioner, capslock, k8sgpt, cni-plugins, dask-gateway, datadog-agent, helm-push,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: keda, spicedb, temporal-server, trillian, telegraf, caddy, vault, step-ca, ferretdb, kine, amass, argo-workflows, kots, k3s, src,...

GHSA-232P-VWFF-86MP vulnerabilities

Vulnerabilities for packages: melange, up, bom, ctop, helm, apko,...

GHSA-X32M-MVFJ-52XV vulnerabilities

Vulnerabilities for packages:...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: melange, pulumi-kubernetes-operator, argo-cd, flux-notification-controller,...

CVE-2023-38470 vulnerabilities

Vulnerabilities for packages:...

GHSA-5QM6-J92F-79JP vulnerabilities

Vulnerabilities for packages:...

GHSA-797F-63WG-8CHV vulnerabilities

Vulnerabilities for packages: python,...

GHSA-JM46-725R-HH9V vulnerabilities

Vulnerabilities for packages: python,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, ip-masq-agent, kubernetes, spark-operator, aws-ebs-csi-driver, cluster-autoscaler, node-feature-discovery, kubernetes-csi-driver-hostpath, local-static-provisioner, nodetaint,...

GHSA-5V6F-5GPQ-2628 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-4408 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-5679 vulnerabilities

Vulnerabilities for packages:...

GHSA-V5QP-MX94-J49V vulnerabilities

Vulnerabilities for packages:...

GHSA-M868-F948-VVJC vulnerabilities

Vulnerabilities for packages:...

GHSA-7P63-JGG6-RGPV vulnerabilities

Vulnerabilities for packages:...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, docker, melange, k3d, prometheus, wolfictl, docker-compose, buf, grype, kaniko, neuvector-scanner, tekton-pipelines, syft, dagger, cri-tools, helm-push,...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: buildah,...

GHSA-C5PJ-MQFH-RVC3 vulnerabilities

Vulnerabilities for packages: buildah,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, gobuster, nats, aws-efs-csi-driver, thanos, kots, kubernetes-csi-livenessprobe, external-dns, grype, ollama, pulumi-language-dotnet, tctl, metacontroller, tomcat, vault-csi-provider, prometheus, up, gitlab-runner, telegraf,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: kubescape, cosign, dex, vexctl, cert-manager, rekor, tekton-pipelines, slsa-verifier, sops, tkn, argo-workflows, oauth2-proxy, kots, terragrunt, spire-server, argo-cd, aactl, kyverno, tekton-chains, external-secrets-operator, gitsign, cloudflared, fulcio,...

GHSA-9766-5277-J5HR vulnerabilities

Vulnerabilities for packages:...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: buildkitd, docker, kubescape, kaniko, zot, scorecard, guac, conftest, datadog-agent, trivy,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: docker, kubescape, ingress-nginx-controller, kaniko, newrelic-infrastructure-agent, datadog-agent, nvidia-device-plugin, kots, k3s, buildkitd, grype, nerdctl, zarf, runc, trivy, skopeo, wolfictl, telegraf, ctop, syft, k9s, skaffold, k3d, kubernetes, cadvisor,...

CVE-2023-31130 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-2727 vulnerabilities

Vulnerabilities for packages:...

GHSA-CFGP-2977-2FMM vulnerabilities

Vulnerabilities for packages: wavefront-proxy,...

GHSA-VR64-R9QJ-H27F vulnerabilities

Vulnerabilities for packages:...

CVE-2024-29131 vulnerabilities

Vulnerabilities for packages: neo4j, cassandra-reaper,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: kubescape, helm, cert-manager, kaniko, tekton-pipelines, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, helm-push, kots, eksctl, gitness, grype, trivy, melange, up, telegraf, ctop, neuvector-agent, skaffold, cilium-cli, k3d, flux-source-controller, zot,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: eksctl, cilium-cli, kubescape, up, cert-manager, k9s, flux-source-controller, istio-operator, trivy, zot, zarf, k8sgpt, helm-operator, flux-helm-controller, helm-push, kots,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: eksctl, cilium-cli, kubescape, up, cert-manager, k9s, flux-source-controller, istio-operator, trivy, zot, zarf, k8sgpt, helm-operator, flux-helm-controller, helm-push, kots,...

CVE-2024-4368 vulnerabilities

Vulnerabilities for packages:...

GHSA-JX24-3G7H-4QJ2 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-3914 vulnerabilities

Vulnerabilities for packages:...

GHSA-5R57-JCC8-JHH3 vulnerabilities

Vulnerabilities for packages:...

GHSA-FFF2-PWCG-X73M vulnerabilities

Vulnerabilities for packages:...

GHSA-JFH3-F27X-P9GP vulnerabilities

Vulnerabilities for packages:...

CVE-2024-4058 vulnerabilities

Vulnerabilities for packages:...

GHSA-9XRG-J488-68QQ vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5493 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5494 vulnerabilities

Vulnerabilities for packages:...

GHSA-P8V3-5HQQ-7C5R vulnerabilities

Vulnerabilities for packages:...

CVE-2024-6103 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5830 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5834 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5836 vulnerabilities

Vulnerabilities for packages:...