Big-ip (ltm, Aam, Afm, Analytics, Apm, Asm, Dns, Edge Gateway, Fps, Gtm, Link Controller, Pem, Webaccelerator), Enterprise Manager, Big-iq Centralized Management, F5 Iworkflow Security Vulnerabilities

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: spire-server, tkn, apko, tekton-chains, goreleaser, kubescape, aactl, policy-controller, melange, falco, skaffold, slsa-verifier, ko,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: pulumi-language-java, goreleaser, keda, kubescape, rclone, zarf, falco, grafana, terragrunt, crossplane, tkn, boring-registry, pulumi-language-dotnet, apko, zot, crossplane-provider-aws, aactl, policy-controller, terraform-provider-google, pulumi, argo-cd,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: cert-manager, goreleaser, keda, zarf, containerd, dgraph, falco, grafana, fulcio, istio-pilot-agent, terragrunt, weaviate, cilium, tkn, apko, minio, aactl, policy-controller, argo-cd, dex, argo-workflows, guac, gitsign, kargo, oauth2-proxy, gomplate, skopeo, vexctl,...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: spire-server, tkn, apko, tekton-chains, goreleaser, kubescape, aactl, policy-controller, melange, falco, skaffold, slsa-verifier, ko,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: docker-compose, cert-manager, kyverno, temporal, keda, kine, kubernetes-csi-external-resizer, containerd, cri-tools, aws-ebs-csi-driver, k3s, kubernetes, kubescape, kubevela, argo-cd, envoy-ratelimit,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: docker-compose, cert-manager, kyverno, temporal, keda, kine, kubernetes-csi-external-resizer, containerd, cri-tools, aws-ebs-csi-driver, k3s, kubernetes, kubescape, kubevela, argo-cd, envoy-ratelimit,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, aws-efs-csi-driver, kubernetes-dns-node-cache, spark-operator, calico, ip-masq-agent, aws-ebs-csi-driver, prometheus-adapter,...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, aws-efs-csi-driver, kubernetes-dns-node-cache, spark-operator, calico, ip-masq-agent, aws-ebs-csi-driver, prometheus-adapter,...

CVE-2024-26147 vulnerabilities

Vulnerabilities for packages: zot, cert-manager, helm-push, trivy, flux-helm-controller, istio-operator, k8sgpt, kubescape, zarf, cilium-cli, chartmuseum, k9s, up, helm-operator, flux-source-controller, kots,...

CVE-2024-34064 vulnerabilities

Vulnerabilities for packages: pytorch, dask-gateway, kubeflow-jupyter-web-app, confluent-docker-utils, reflex, py3-jinja2, superset,...

CVE-2023-29405 vulnerabilities

Vulnerabilities for packages: kind, falco,...

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-49559 vulnerabilities

Vulnerabilities for packages: zot, melange, guac, dagger,...

CVE-2024-27306 vulnerabilities

Vulnerabilities for packages: dask-gateway,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: goreleaser, kubescape, zarf, falco, tkn, zot, apko, aactl, policy-controller, gitsign, vexctl, wolfictl, neuvector-sigstore-interface, melange, falcoctl, ko, spire-server, tekton-chains, skaffold, slsa-verifier,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: nri-postgresql, velero-plugin-for-csi, terragrunt, nsc, nri-mssql, q, opentofu, memcached-exporter, pluto, haproxy-ingress, ingress-nginx-controller, cluster-autoscaler, gomplate, kyverno, flux-image-automation-controller, kubernetes-csi-external-resizer, lazygit,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: go-licenses, amass, influx, mage, goreleaser, flannel-cni-plugin, dgraph, sbom-scorecard, falco, nsc, k3d, metrics-server, go-bindata, docker-cli, petname, gops, prometheus-bind-exporter, aws-flb-firehose, helm-push, gitlab-logger, oras, cni-plugins, aactl,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: go-licenses, amass, influx, mage, goreleaser, flannel-cni-plugin, dgraph, sbom-scorecard, falco, nsc, k3d, metrics-server, go-bindata, docker-cli, petname, gops, prometheus-bind-exporter, aws-flb-firehose, helm-push, gitlab-logger, oras, cni-plugins, aactl,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: go-licenses, amass, influx, mage, goreleaser, flannel-cni-plugin, dgraph, sbom-scorecard, falco, nsc, k3d, metrics-server, go-bindata, docker-cli, petname, gops, prometheus-bind-exporter, aws-flb-firehose, helm-push, gitlab-logger, oras, cni-plugins, aactl,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: cert-manager, goreleaser, keda, zarf, containerd, dgraph, falco, grafana, fulcio, istio-pilot-agent, terragrunt, weaviate, cilium, tkn, apko, minio, aactl, policy-controller, argo-cd, dex, argo-workflows, guac, gitsign, kargo, oauth2-proxy, gomplate, skopeo, vexctl,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terraform, bom, k8sgpt-operator, go, prometheus-bind-exporter, zot, telegraf, minio, memcached-exporter, opentofu, haproxy-ingress, helm,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terraform, bom, k8sgpt-operator, prometheus-bind-exporter, zot, telegraf, minio, memcached-exporter, opentofu, haproxy-ingress, helm, gke-gcloud-auth-plugin,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, amass, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terragrunt, terraform, nsc, terraform-provider-azurerm, nri-mssql, crossplane, bom, prometheus-bind-exporter, zot, telegraf, opentofu, memcached-exporter, haproxy-ingress,....

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, cert-manager, pulumi-language-java, goreleaser, grype, keda, calico, dgraph, kubescape, node-problem-detector, falco, prometheus-blackbox-exporter, spark-operator, terraform-provider-azurerm, k3d, metrics-server, secrets-store-csi-driver,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, goreleaser, dgraph, dotnet, node-problem-detector, terraform, terraform-provider-azurerm, bom, prometheus-bind-exporter, telegraf, minio, memcached-exporter, opentofu, haproxy-ingress, helm, gke-gcloud-auth-plugin,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

CVE-2024-37891 vulnerabilities

Vulnerabilities for packages: airflow, dask-gateway, k8s-sidecar, kubeflow-jupyter-web-app, confluent-docker-utils, az, kubeflow-pipelines, reflex, ggshield, superset, mlflow, py3-urllib3, kubeflow-volumes-web-app, kubeflow-katib,...

GHSA-MW99-9CHC-XW7R vulnerabilities

Vulnerabilities for packages: go-licenses, pulumi-language-java, goreleaser, bom, kots, zot, pulumi-language-dotnet, apko, nuclei, pulumi, argo-cd, gitsign, gomplate, pulumi-language-yaml, pulumi-kubernetes-operator, tekton-pipelines, gitness, src-fingerprint, kubevela, scorecard,...

CVE-2024-29025 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, neo4j, selenium, management-api-for-apache-cassandra, keycloak, wavefront-proxy, spark,...

GHSA-5JPM-X58V-624V vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, neo4j, selenium, management-api-for-apache-cassandra, keycloak, wavefront-proxy, spark,...

GHSA-7GPW-8WMC-PM8G vulnerabilities

Vulnerabilities for packages: dask-gateway,...

CVE-2023-29402 vulnerabilities

Vulnerabilities for packages: kind, falco,...

CVE-2023-29404 vulnerabilities

Vulnerabilities for packages: kind, falco,...

GHSA-68G3-2P3G-W9PQ vulnerabilities

Vulnerabilities for packages: kind, falco,...

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-20

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-20. This CVE either no longer is or was never...

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-20

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-20. This CVE either no longer is or was never...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: goreleaser, kubescape, zarf, falco, tkn, zot, apko, aactl, policy-controller, gitsign, vexctl, wolfictl, neuvector-sigstore-interface, melange, falcoctl, ko, spire-server, tekton-chains, skaffold, slsa-verifier,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: zot, cert-manager, helm-push, trivy, flux-helm-controller, istio-operator, k8sgpt, kubescape, zarf, cilium-cli, chartmuseum, k9s, up, helm-operator, flux-source-controller, kots,...

GHSA-W235-7P84-XX57 vulnerabilities

Vulnerabilities for packages: py3-tornado, airflow,...

GHSA-V845-JXX5-VC9F vulnerabilities

Vulnerabilities for packages: k8s-sidecar, dask-gateway, kube-downscaler, kubeflow-jupyter-web-app, py3-urllib3,...

CVE-2023-43804 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, dask-gateway, kube-downscaler, kubeflow-jupyter-web-app, py3-urllib3,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, kube-state-metrics, cert-manager-webhook-pdns, gitleaks, mage, wave, dgraph, clusterctl, tempo, crossplane, bom, newrelic-prometheus-configurator, mockery, newrelic-infra-operator, q, go, prometheus-bind-exporter, zot,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: nri-postgresql, velero-plugin-for-csi, terragrunt, nsc, nri-mssql, q, opentofu, memcached-exporter, pluto, haproxy-ingress, ingress-nginx-controller, cluster-autoscaler, gomplate, kyverno, flux-image-automation-controller, kubernetes-csi-external-resizer, lazygit,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: filebeat, cert-manager, goreleaser, kubescape, zarf, falco, cadvisor, istio-pilot-agent, newrelic-infrastructure-agent, helm-operator, bom, kots, zot, telegraf, datadog-agent, loki, gitlab-runner, aactl, policy-controller, cri-tools, helm, pulumi, crane, traefik,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...