Tuesday, July 2, 2024 Security Releases
Summary The Node.js project will release new versions of the 22.x, 20.x, 18.x releases lines on or shortly after, Tuesday, July 2, 2024 in order to address: 1 high severity issues. 2 medium severity issues. 3 low severity issues. Node.js fetch will be upgraded to undici v6.19.2 on Node.js 18.x...
7AI Score
CVE-2024-38525 dd-trace-cpp malformed unicode header values may cause crash
dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...
7.5CVSS
EPSS
5.3CVSS
5.5AI Score
0.0005EPSS
Vulnerabilities for packages: nuclei, step-ca, skopeo, flux-image-automation-controller, ksops, gitlab-shell, consul, gitlab-kas, prometheus, timestamp-authority, crossplane-provider-azure, guac, policy-controller, rook, k3d, flux-notification-controller, pulumi-kubernetes-operator, sops, kyverno,....
6CVSS
6AI Score
0.0004EPSS
CVE-2023-44487 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kaf, wireguard-go, git-lfs, oauth2-proxy, grpcurl, spark-operator, pulumi-language-java, flux-source-controller, kubeflow-katib, dotnet, weaviate, atlantis, gitlab-runner, kind, buildkitd, keda, cert-manager,...
7.5CVSS
9AI Score
0.732EPSS
GHSA-X84C-P2G9-RQV9 vulnerabilities
Vulnerabilities for packages: k3d, tekton-pipelines, kaniko, grype, docker-compose, dagger, wolfictl, docker, cri-tools, helm-push, neuvector-scanner, prometheus, syft, harbor-scanner-trivy, policy-controller, buf,...
7.5AI Score
7.5AI Score
7.5CVSS
7.5AI Score
0.001EPSS
7.5CVSS
7.5AI Score
0.001EPSS
7.5AI Score
5.3CVSS
7.2AI Score
0.0005EPSS
7.5AI Score
7.5AI Score
6.5CVSS
7.7AI Score
0.001EPSS
7.5AI Score
7.5AI Score
6.3AI Score
0.0004EPSS
GHSA-7WW5-4WQC-M92C vulnerabilities
Vulnerabilities for packages: neuvector-agent, trivy, skaffold, cilium-cli, kots, k3d, kaniko, newrelic-infrastructure-agent, helm, ctop, telegraf, tekton-pipelines, flux-source-controller, eksctl, up, gitness, grype, kubevela, cert-manager, kubescape, helm-push, zot, flux-helm-controller,...
7.5AI Score
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: helm-operator, flux-source-controller, kots, k8sgpt, trivy, zarf, k9s, cert-manager, eksctl, helm-push, chartmuseum, kubescape, flux-helm-controller, up, zot, cilium-cli,...
6.4CVSS
6.7AI Score
0.0004EPSS
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: helm-operator, flux-source-controller, kots, k8sgpt, trivy, zarf, k9s, cert-manager, eksctl, helm-push, chartmuseum, kubescape, flux-helm-controller, up, zot, cilium-cli,...
7.5AI Score
7.5AI Score
0.0004EPSS
7.5AI Score
8.9AI Score
0.0005EPSS
7.5AI Score
7.5AI Score
7.5AI Score
8.8CVSS
6.8AI Score
0.001EPSS
7.5AI Score
8.8CVSS
7.1AI Score
0.003EPSS
7.2AI Score
0.0004EPSS
7.2AI Score
0.0004EPSS
7.5AI Score
7.5AI Score
7.5AI Score
8.8CVSS
7.2AI Score
0.001EPSS
8.8CVSS
7.2AI Score
0.001EPSS
8.8CVSS
7.2AI Score
0.001EPSS
8.8CVSS
7.2AI Score
0.001EPSS
8.8CVSS
7.2AI Score
0.001EPSS
7.5AI Score
7.5AI Score
7.5AI Score
Vulnerabilities for packages: cloudflared, kubernetes-dns-node-cache,...
5.3CVSS
5.5AI Score
0.0004EPSS
7.5AI Score
8.8CVSS
7.2AI Score
0.0004EPSS
7.5AI Score
7.5AI Score
5.5CVSS
7.7AI Score
0.001EPSS
7.1AI Score
0.0004EPSS
7.1AI Score
0.0004EPSS