Modicon Controllers (M340 CPUs, M340 Communication Modules, Premium CPUs, Premium Communication Modules, Quantum CPUs, Quantum Communication Modules - See Security Notification For Specific Versions) Security Vulnerabilities

Tuesday, July 2, 2024 Security Releases

Summary The Node.js project will release new versions of the 22.x, 20.x, 18.x releases lines on or shortly after, Tuesday, July 2, 2024 in order to address: 1 high severity issues. 2 medium severity issues. 3 low severity issues. Node.js fetch will be upgraded to undici v6.19.2 on Node.js 18.x...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: skaffold, policy-controller, wolfictl, apko, slsa-verifier, goreleaser, flux-source-controller, neuvector-sigstore-interface, aactl, falcoctl, tkn, tekton-chains, ko, spire-server, vexctl, gitsign, zarf, kubescape, zot, falco,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: nuclei, step-ca, skopeo, flux-image-automation-controller, ksops, gitlab-shell, consul, gitlab-kas, prometheus, timestamp-authority, crossplane-provider-azure, guac, policy-controller, rook, k3d, flux-notification-controller, pulumi-kubernetes-operator, sops, kyverno,....

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kaf, wireguard-go, git-lfs, oauth2-proxy, grpcurl, spark-operator, pulumi-language-java, flux-source-controller, kubeflow-katib, dotnet, weaviate, atlantis, gitlab-runner, kind, buildkitd, keda, cert-manager,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: trivy, dagger, prometheus, kaniko, wolfictl, ctop, telegraf, kargo, goreleaser, crossplane, aactl, cadvisor, tkn, up, syft, ko, spire-server, buf, buildkitd, docker-compose, grype, conftest, kubescape, loki, zot, datadog-agent,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: vault, istio-pilot-discovery, kots, sops, cloudflared, kyverno, slsa-verifier, oauth2-proxy, argo-workflows, cosign, tekton-pipelines, flux-source-controller, aactl, external-secrets-operator, argo-cd, tkn, fulcio, tekton-chains, spire-server, terragrunt, vexctl,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: skaffold, prometheus, k3d, ctop, slsa-verifier, k3s, bom, paranoia, goreleaser, tekton-pipelines, aactl, kpt, up, tekton-chains, scorecard, cert-manager, kubescape, loki, chartmuseum,...

GHSA-V5QP-MX94-J49V vulnerabilities

Vulnerabilities for packages:...

CVE-2023-5680 vulnerabilities

Vulnerabilities for packages:...

GHSA-M868-F948-VVJC vulnerabilities

Vulnerabilities for packages:...

GHSA-7P63-JGG6-RGPV vulnerabilities

Vulnerabilities for packages:...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: k3d, tekton-pipelines, kaniko, grype, docker-compose, dagger, wolfictl, docker, cri-tools, helm-push, neuvector-scanner, prometheus, syft, harbor-scanner-trivy, policy-controller, buf,...

CVE-2023-31130 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-2727 vulnerabilities

Vulnerabilities for packages:...

GHSA-CFGP-2977-2FMM vulnerabilities

Vulnerabilities for packages: calico,...

GHSA-VR64-R9QJ-H27F vulnerabilities

Vulnerabilities for packages:...

CVE-2024-29131 vulnerabilities

Vulnerabilities for packages: neo4j, cassandra-reaper,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: neuvector-agent, trivy, skaffold, cilium-cli, kots, k3d, kaniko, newrelic-infrastructure-agent, helm, ctop, telegraf, tekton-pipelines, flux-source-controller, eksctl, up, gitness, grype, kubevela, cert-manager, kubescape, helm-push, zot, flux-helm-controller,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: helm-operator, flux-source-controller, kots, k8sgpt, trivy, zarf, k9s, cert-manager, eksctl, helm-push, chartmuseum, kubescape, flux-helm-controller, up, zot, cilium-cli,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: helm-operator, flux-source-controller, kots, k8sgpt, trivy, zarf, k9s, cert-manager, eksctl, helm-push, chartmuseum, kubescape, flux-helm-controller, up, zot, cilium-cli,...

CVE-2024-4368 vulnerabilities

Vulnerabilities for packages:...

GHSA-JX24-3G7H-4QJ2 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-3914 vulnerabilities

Vulnerabilities for packages:...

GHSA-5R57-JCC8-JHH3 vulnerabilities

Vulnerabilities for packages:...

GHSA-FFF2-PWCG-X73M vulnerabilities

Vulnerabilities for packages:...

GHSA-JFH3-F27X-P9GP vulnerabilities

Vulnerabilities for packages:...

CVE-2024-4058 vulnerabilities

Vulnerabilities for packages:...

GHSA-9XRG-J488-68QQ vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5274 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5494 vulnerabilities

Vulnerabilities for packages:...

GHSA-P8V3-5HQQ-7C5R vulnerabilities

Vulnerabilities for packages:...

GHSA-M848-8F5R-6J4G vulnerabilities

Vulnerabilities for packages:...

GHSA-RPVG-H6P6-42QJ vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5830 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5834 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5836 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5837 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5841 vulnerabilities

Vulnerabilities for packages:...

GHSA-RW9Q-CWC5-QQP5 vulnerabilities

Vulnerabilities for packages:...

GHSA-X989-52FC-4VR4 vulnerabilities

Vulnerabilities for packages: hubble,...

CVE-2024-0874 vulnerabilities

Vulnerabilities for packages: cloudflared, kubernetes-dns-node-cache,...

GHSA-HMR7-M48G-48F6 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter,...

CVE-2024-35242 vulnerabilities

Vulnerabilities for packages:...

GHSA-6HW5-6GCX-PHMW vulnerabilities

Vulnerabilities for packages: consul,...

GHSA-Q6H7-4QGW-2J9P vulnerabilities

Vulnerabilities for packages: consul,...

CVE-2023-43618 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43620 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43621 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-23471 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-24769 vulnerabilities

Vulnerabilities for packages:...