Security Verify Governance, Identity Manager Security Vulnerabilities

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: falco, vault, flux-kustomize-controller, kots, fulcio, gitsign, vexctl, argo-cd, aactl, dex, tekton-chains, istio-pilot-discovery, sops, cloudflared, kyverno, cert-manager, flux-source-controller, kubescape, terragrunt, spire-server, cosign, traefik, argo-workflows,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: kpt, falco, up, bom, prometheus, chartmuseum, ctop, aactl, tekton-chains, goreleaser, cert-manager, kubescape, scorecard, k3d, tekton-pipelines, paranoia, skaffold, slsa-verifier, k3s,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kaniko, prometheus-nats-exporter, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, istio-cni, vault, cloud-sql-proxy, flux-image-reflector-controller, pulumi, docker-compose, eksctl, guac, dgraph, volume-modifier-for-k8s,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: kaniko, fuse-overlayfs-snapshotter, grype, gitness, eksctl, up, kots, flux-helm-controller, ctop, cert-manager, flux-source-controller, newrelic-infrastructure-agent, kubescape, k3d, melange, tekton-pipelines, zot, skaffold, kubevela, helm, trivy, cilium-cli,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-helm-controller, kubescape, k9s, chartmuseum, trivy, zot, istio-operator, helm-operator, cilium-cli, zarf, up, eksctl, k8sgpt, helm-push, kots,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-helm-controller, kubescape, k9s, chartmuseum, trivy, zot, istio-operator, helm-operator, cilium-cli, zarf, up, eksctl, k8sgpt, helm-push, kots,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, pulumi, flux-kustomize-controller, dgraph, dynamic-localpv-provisioner, nri-prometheus, argo-cd, aactl, haproxy-ingress, ollama, stakater-reloader, cortex, gomplate, rqlite, scorecard, thanos, atlantis, flux-notification-controller,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, kube-bench, fuse-overlayfs-snapshotter, flux-image-reflector-controller, go-md2man, docker-compose, flux-kustomize-controller, eksctl, guac, dgraph, volume-modifier-for-k8s, configmap-reload, dynamic-localpv-provisioner, mockery, croc,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, kube-bench, fuse-overlayfs-snapshotter, flux-image-reflector-controller, go-md2man, docker-compose, flux-kustomize-controller, eksctl, guac, dgraph, volume-modifier-for-k8s, configmap-reload, dynamic-localpv-provisioner, mockery, croc,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: amass, falco, gobuster, prometheus-bind-exporter, go-md2man, local-path-provisioner, grpcurl, cni-plugins, wait-for-port, dgraph, protoc-gen-go-grpc, configmap-reload, render-template, gitlab-logger, gops, aactl, ctop, aws-flb-cloudwatch, sbom-scorecard,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, vault, cloud-sql-proxy, flux-image-reflector-controller, apko, pulumi, flux-kustomize-controller, dgraph, thanos-operator, dynamic-localpv-provisioner, nri-prometheus, kubernetes-csi-external-resizer, argo-cd, aactl, haproxy-ingress,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: kubevela, gatekeeper, prometheus, ipfs, thanos, gitlab-kas, k3s, caddy, prometheus-adapter, calico, keda, up, kubernetes,...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: kubevela, gatekeeper, prometheus, ipfs, thanos, gitlab-kas, k3s, caddy, prometheus-adapter, calico, keda, up, kubernetes,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: policy-controller, k9s, falco, flux-image-reflector-controller, crane, pulumi, eksctl, k8sgpt, guac, bom, up, istio-pilot-agent, kots, cadvisor, prometheus, flux-helm-controller, gitsign, vexctl, aactl, ctop, kubeflow-katib, cri-tools, tekton-chains, goreleaser,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, istio-cni, vault, cloud-sql-proxy, flux-image-reflector-controller, apko, pulumi, nri-mssql, flux-kustomize-controller, eksctl, dgraph, dynamic-localpv-provisioner, fulcio, argo-cd, aactl, haproxy-ingress, temporal-ui-server, ollama, flux,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kaniko, prometheus-nats-exporter, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, istio-cni, vault, cloud-sql-proxy, flux-image-reflector-controller, pulumi, docker-compose, eksctl, guac, dgraph, volume-modifier-for-k8s,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: go-md2man, guac, volume-modifier-for-k8s, xcaddy, atlantis, node-problem-detector, helm-operator, q, flyte, gosu, telegraf, rekor, kubewatch, trust-manager, opentofu, sigstore-scaffolding, secrets-store-csi-driver, crossplane-provider-azure, pulumi-language-dotnet,...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, istio-cni, vault, cloud-sql-proxy, flux-image-reflector-controller, apko, pulumi, flux-kustomize-controller, dgraph, thanos-operator, dynamic-localpv-provisioner, nri-prometheus, kubernetes-csi-external-resizer, argo-cd, aactl,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: go-md2man, guac, volume-modifier-for-k8s, xcaddy, atlantis, node-problem-detector, helm-operator, q, flyte, gosu, telegraf, rekor, kubewatch, trust-manager, opentofu, sigstore-scaffolding, secrets-store-csi-driver, crossplane-provider-azure, pulumi-language-dotnet,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: policy-controller, step, istio-cni, falco, rabbitmq-messaging-topology-operator, sigstore-scaffolding, vault, weaviate, apko, flux-kustomize-controller, cilium, guac, istio-pilot-agent, kots, fulcio, gitsign, vexctl, argo-cd, aactl, dex, frp, tekton-chains,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, kube-bench, fuse-overlayfs-snapshotter, flux-image-reflector-controller, go-md2man, docker-compose, flux-kustomize-controller, eksctl, guac, dgraph, volume-modifier-for-k8s, configmap-reload, dynamic-localpv-provisioner, mockery, croc,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: containerd, aws-ebs-csi-driver, kubevela, kubescape, kubernetes-csi-external-resizer, argo-cd, k3s, envoy-ratelimit, kine, keda, cri-tools, docker-compose, temporal-server, temporal, kubernetes, kyverno,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: containerd, aws-ebs-csi-driver, kubevela, kubescape, kubernetes-csi-external-resizer, argo-cd, k3s, envoy-ratelimit, kine, keda, cri-tools, docker-compose, temporal-server, temporal, kubernetes, kyverno,...

CVE-2024-26147 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-helm-controller, kubescape, k9s, chartmuseum, trivy, zot, istio-operator, helm-operator, cilium-cli, zarf, up, eksctl, k8sgpt, helm-push, kots,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, istio-cni, vault, cloud-sql-proxy, flux-image-reflector-controller, apko, pulumi, flux-kustomize-controller, dgraph, thanos-operator, dynamic-localpv-provisioner, nri-prometheus, kubernetes-csi-external-resizer, argo-cd, aactl,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, istio-cni, vault, cloud-sql-proxy, flux-image-reflector-controller, apko, pulumi, nri-mssql, flux-kustomize-controller, eksctl, dgraph, dynamic-localpv-provisioner, fulcio, argo-cd, aactl, haproxy-ingress, temporal-ui-server, ollama, flux,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: grype, terraform-provider-azurerm, falco, weaviate, conftest, secrets-store-csi-driver, pulumi, flux-kustomize-controller, pulumi-language-dotnet, up, dgraph, kots, dynamic-localpv-provisioner, prometheus, telegraf, flux-helm-controller, influxd,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, pulumi, flux-kustomize-controller, dgraph, dynamic-localpv-provisioner, nri-prometheus, argo-cd, aactl, haproxy-ingress, ollama, stakater-reloader, cortex, gomplate, rqlite, scorecard, thanos, atlantis, flux-notification-controller,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-helm-controller, kubescape, k9s, chartmuseum, trivy, zot, istio-operator, helm-operator, cilium-cli, zarf, up, eksctl, k8sgpt, helm-push, kots,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: amass, falco, gobuster, prometheus-bind-exporter, go-md2man, local-path-provisioner, grpcurl, cni-plugins, wait-for-port, dgraph, protoc-gen-go-grpc, configmap-reload, render-template, gitlab-logger, gops, aactl, ctop, aws-flb-cloudwatch, sbom-scorecard,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: amass, falco, gobuster, prometheus-bind-exporter, go-md2man, local-path-provisioner, grpcurl, cni-plugins, wait-for-port, dgraph, protoc-gen-go-grpc, configmap-reload, render-template, gitlab-logger, gops, aactl, ctop, aws-flb-cloudwatch, sbom-scorecard,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, vault, cloud-sql-proxy, flux-image-reflector-controller, apko, pulumi, flux-kustomize-controller, dgraph, thanos-operator, dynamic-localpv-provisioner, nri-prometheus, kubernetes-csi-external-resizer, argo-cd, aactl, haproxy-ingress,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: amass, falco, gobuster, prometheus-bind-exporter, go-md2man, local-path-provisioner, grpcurl, cni-plugins, wait-for-port, dgraph, protoc-gen-go-grpc, configmap-reload, render-template, gitlab-logger, gops, aactl, ctop, aws-flb-cloudwatch, sbom-scorecard,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: policy-controller, step, istio-cni, falco, rabbitmq-messaging-topology-operator, sigstore-scaffolding, vault, weaviate, apko, flux-kustomize-controller, cilium, guac, istio-pilot-agent, kots, fulcio, gitsign, vexctl, argo-cd, aactl, dex, frp, tekton-chains,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: nri-cassandra, kube-bench, kubeadm-controlplane-controller, fuse-overlayfs-snapshotter, nri-memcached, cloud-sql-proxy, flux-image-reflector-controller, go-md2man, pulumi, nri-mssql, eksctl, dgraph, volume-modifier-for-k8s, thanos-operator, configmap-reload,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: policy-controller, k9s, falco, flux-image-reflector-controller, crane, pulumi, eksctl, k8sgpt, guac, bom, up, istio-pilot-agent, kots, cadvisor, prometheus, flux-helm-controller, gitsign, vexctl, aactl, ctop, kubeflow-katib, cri-tools, tekton-chains, goreleaser,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, kube-bench, fuse-overlayfs-snapshotter, flux-image-reflector-controller, go-md2man, docker-compose, flux-kustomize-controller, eksctl, guac, dgraph, volume-modifier-for-k8s, configmap-reload, dynamic-localpv-provisioner, mockery, croc,...