Big-ip (ltm, Aam, Afm, Analytics, Apm, Asm, Dns, Edge Gateway, Fps, Gtm, Link Controller, Pem, Webaccelerator) Security Vulnerabilities

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: cert-manager, grype, kubescape, newrelic-infrastructure-agent, k3d, kots, zot, helm-push, telegraf, fuse-overlayfs-snapshotter, cilium-cli, helm, up, melange, tekton-pipelines, eksctl, ctop, gitness, trivy, flux-helm-controller, kubevela, kaniko, skaffold,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: zot, cert-manager, helm-push, trivy, flux-helm-controller, istio-operator, k8sgpt, kubescape, zarf, cilium-cli, chartmuseum, k9s, up, helm-operator, flux-source-controller, kots,...

GHSA-888H-RM2R-VRC7 vulnerabilities

Vulnerabilities for packages: kind, falco,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: buf, docker-compose, helm-push, neuvector-scanner, wolfictl, grype, policy-controller, syft, cri-tools, melange, harbor-scanner-trivy, kaniko, tekton-pipelines, k3d, docker, prometheus,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: grype, kubescape, zarf, cadvisor, newrelic-infrastructure-agent, k3d, kots, zot, telegraf, datadog-agent, ingress-nginx-controller, runc, skopeo, wolfictl, k3s, kubernetes, buildkitd, docker, k9s, ctop, trivy, syft, skaffold, kaniko, nerdctl,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: goreleaser, kubescape, zarf, falco, tkn, zot, apko, aactl, policy-controller, gitsign, vexctl, wolfictl, neuvector-sigstore-interface, melange, falcoctl, ko, spire-server, tekton-chains, skaffold, slsa-verifier,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, goreleaser, dgraph, dotnet, node-problem-detector, terraform, terraform-provider-azurerm, bom, prometheus-bind-exporter, telegraf, minio, memcached-exporter, opentofu, haproxy-ingress, helm, gke-gcloud-auth-plugin,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: cert-manager, opentelemetry-collector-contrib, goreleaser, keda, kubescape, zarf, gitlab-shell, terragrunt, terraform, fulcio, terraform-provider-azurerm, k3d, tkn, zot, loki, nuclei, opentofu, gitlab-runner, aactl, policy-controller, pulumi, argo-cd,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: cert-manager, keda, kubescape, falco, terragrunt, fulcio, kots, tkn, aactl, argo-cd, traefik, dex, argo-workflows, gitsign, oauth2-proxy, kyverno, vexctl, tekton-pipelines, istio-pilot-discovery, cosign, spire-server, external-secrets-operator, vault, tekton-chains,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terragrunt, terraform, terraform-provider-azurerm, clusterctl, crossplane, k8sgpt-operator, newrelic-infra-operator, prometheus-bind-exporter, zot,...

CVE-2024-0874 vulnerabilities

Vulnerabilities for packages: cloudflared, consul,...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: melange, pulumi-kubernetes-operator, argo-cd, flux-notification-controller,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, kubernetes-dns-node-cache, spark-operator, calico, kubernetes, aws-ebs-csi-driver, ip-masq-agent, kubernetes-csi-driver-hostpath, local-static-provisioner, node-feature-discovery,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: zot, cert-manager, helm-push, trivy, flux-helm-controller, istio-operator, k8sgpt, kubescape, zarf, cilium-cli, chartmuseum, k9s, up, helm-operator, flux-source-controller, kots,...

GHSA-JJG7-2V4V-X38H vulnerabilities

Vulnerabilities for packages: py3-idna, dask-gateway, k8s-sidecar, datadog-agent, py3.10-tensorflow-core, jwt-tool, confluent-docker-utils, az, kubeflow-jupyter-web-app, kubeflow-pipelines, ggshield, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, kubeflow-katib,...

CVE-2023-29403 vulnerabilities

Vulnerabilities for packages: kind, falco,...

GHSA-F2CJ-5636-4J38 vulnerabilities

Vulnerabilities for packages: kind, falco,...

GHSA-RXX3-4978-3CC9 vulnerabilities

Vulnerabilities for packages: kind, falco,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: nri-postgresql, velero-plugin-for-csi, terragrunt, nsc, nri-mssql, docker-cli, q, zot, opentofu, memcached-exporter, haproxy-ingress, ingress-nginx-controller, argo-cd, cluster-autoscaler, gomplate, kyverno, flux-image-automation-controller,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, kube-state-metrics, cert-manager-webhook-pdns, gitleaks, mage, wave, dgraph, clusterctl, tempo, crossplane, bom, newrelic-prometheus-configurator, mockery, newrelic-infra-operator, q, go, prometheus-bind-exporter, zot,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, kube-state-metrics, cert-manager-webhook-pdns, gitleaks, mage, wave, dgraph, clusterctl, tempo, crossplane, bom, newrelic-prometheus-configurator, mockery, newrelic-infra-operator, q, go, prometheus-bind-exporter, zot,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: nri-postgresql, velero-plugin-for-csi, terragrunt, nsc, nri-mssql, q, opentofu, memcached-exporter, pluto, haproxy-ingress, ingress-nginx-controller, cluster-autoscaler, gomplate, kyverno, flux-image-automation-controller, kubernetes-csi-external-resizer, lazygit,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: cert-manager, opentelemetry-collector-contrib, goreleaser, keda, kubescape, zarf, gitlab-shell, terragrunt, terraform, fulcio, terraform-provider-azurerm, k3d, tkn, zot, loki, nuclei, opentofu, gitlab-runner, aactl, policy-controller, pulumi, argo-cd,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: go-licenses, amass, influx, mage, goreleaser, flannel-cni-plugin, dgraph, sbom-scorecard, falco, nsc, k3d, metrics-server, go-bindata, docker-cli, petname, gops, prometheus-bind-exporter, aws-flb-firehose, helm-push, gitlab-logger, oras, cni-plugins, aactl,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terraform, bom, k8sgpt-operator, prometheus-bind-exporter, zot, telegraf, minio, memcached-exporter, opentofu, haproxy-ingress, helm, gke-gcloud-auth-plugin,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, amass, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terragrunt, terraform, nsc, terraform-provider-azurerm, nri-mssql, crossplane, bom, prometheus-bind-exporter, zot, telegraf, opentofu, memcached-exporter, haproxy-ingress,....

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: filebeat, cert-manager, goreleaser, kubescape, zarf, falco, cadvisor, istio-pilot-agent, newrelic-infrastructure-agent, helm-operator, bom, kots, zot, telegraf, datadog-agent, loki, gitlab-runner, aactl, policy-controller, cri-tools, helm, pulumi, crane, traefik,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terragrunt, terraform, terraform-provider-azurerm, clusterctl, crossplane, k8sgpt-operator, newrelic-infra-operator, prometheus-bind-exporter, zot,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

GHSA-753J-MPMX-QQ6G vulnerabilities

Vulnerabilities for packages: py3-tornado, airflow,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: filebeat, cert-manager, opentelemetry-collector-contrib, harbor-registry, goreleaser, keda, kubescape, rclone, zarf, hugo, grafana, prometheus-operator, chezmoi, fulcio, terragrunt, tempo, velero, tkn, airflow, boring-registry, telegraf, zot, loki, sqlpad, nuclei,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: filebeat, cert-manager, opentelemetry-collector-contrib, harbor-registry, goreleaser, keda, kubescape, rclone, zarf, hugo, grafana, prometheus-operator, chezmoi, fulcio, terragrunt, tempo, velero, tkn, airflow, boring-registry, telegraf, zot, loki, sqlpad, nuclei,...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: melange, pulumi-kubernetes-operator, argo-cd, flux-notification-controller,...

CVE-2024-3651 vulnerabilities

Vulnerabilities for packages: py3-idna, dask-gateway, k8s-sidecar, datadog-agent, py3.10-tensorflow-core, jwt-tool, confluent-docker-utils, az, kubeflow-jupyter-web-app, kubeflow-pipelines, ggshield, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, kubeflow-katib,...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: buf, docker-compose, helm-push, neuvector-scanner, wolfictl, grype, policy-controller, syft, cri-tools, melange, harbor-scanner-trivy, kaniko, tekton-pipelines, k3d, docker, prometheus,...

GHSA-M9W6-WP3H-VQ8G vulnerabilities

Vulnerabilities for packages: cloudflared, consul,...

GHSA-H75V-3VVJ-5MFJ vulnerabilities

Vulnerabilities for packages: pytorch, dask-gateway, kubeflow-jupyter-web-app, confluent-docker-utils, reflex, py3-jinja2, superset,...

GHSA-2HMF-46V7-V6FX vulnerabilities

Vulnerabilities for packages: zot, melange, guac, dagger,...

CVE-2024-30251 vulnerabilities

Vulnerabilities for packages:...

GHSA-5M98-QGG9-WH84 vulnerabilities

Vulnerabilities for packages:...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: goreleaser, kubescape, zarf, falco, tkn, zot, apko, aactl, policy-controller, gitsign, vexctl, wolfictl, neuvector-sigstore-interface, melange, falcoctl, ko, spire-server, tekton-chains, skaffold, slsa-verifier,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: nri-postgresql, velero-plugin-for-csi, terragrunt, nsc, nri-mssql, docker-cli, q, zot, opentofu, memcached-exporter, haproxy-ingress, ingress-nginx-controller, argo-cd, cluster-autoscaler, gomplate, kyverno, flux-image-automation-controller,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, kube-state-metrics, cert-manager-webhook-pdns, gitleaks, mage, wave, dgraph, clusterctl, tempo, crossplane, bom, newrelic-prometheus-configurator, mockery, newrelic-infra-operator, q, go, prometheus-bind-exporter, zot,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: nri-postgresql, velero-plugin-for-csi, terragrunt, nsc, nri-mssql, q, opentofu, memcached-exporter, pluto, haproxy-ingress, ingress-nginx-controller, cluster-autoscaler, gomplate, kyverno, flux-image-automation-controller, kubernetes-csi-external-resizer, lazygit,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terraform, bom, k8sgpt-operator, go, prometheus-bind-exporter, zot, telegraf, minio, memcached-exporter, opentofu, haproxy-ingress, helm,...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: spire-server, tkn, apko, tekton-chains, goreleaser, kubescape, aactl, policy-controller, melange, falco, skaffold, slsa-verifier, ko,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: pulumi-language-java, goreleaser, keda, kubescape, rclone, zarf, falco, grafana, terragrunt, crossplane, tkn, boring-registry, pulumi-language-dotnet, apko, zot, crossplane-provider-aws, aactl, policy-controller, terraform-provider-google, pulumi, argo-cd,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: cert-manager, goreleaser, keda, zarf, containerd, dgraph, falco, grafana, fulcio, istio-pilot-agent, terragrunt, weaviate, cilium, tkn, apko, minio, aactl, policy-controller, argo-cd, dex, argo-workflows, guac, gitsign, kargo, oauth2-proxy, gomplate, skopeo, vexctl,...