Fonts Plugin | Google Fonts Typography Security Vulnerabilities

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: cilium-envoy, argo-cd, dgraph, kaf, pulumi, prometheus-adapter, gitness, nghttp2, newrelic-infrastructure-agent, falco, dotnet, nats, kpt, prometheus-stackdriver-exporter, gomplate, metacontroller, tctl, thanos, kubevela, node-problem-detector, aactl, haproxy-ingress,....

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k3s, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, argo-cd, thanos-operator, gcsfuse, boring-registry, cilium, nuclei, dgraph, tekton-chains, kaf, pulumi, spire-server, doppler-kubernetes-operator, zot, prometheus-adapter, cri-tools, gitness,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: k3s, kubescape, nerdctl, ingress-nginx-controller, kaniko, grype, docker, ctop, buildkitd, zot, wolfictl, nvidia-device-plugin, telegraf, newrelic-infrastructure-agent, k9s, datadog-agent, syft, k3d, runc, kots, skaffold, kubernetes, trivy, zarf, cadvisor,...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: k3d, restic, gke-gcloud-auth-plugin, wireguard-go, hey, go, grpcurl, falco,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, argo-cd, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, kube-rbac-proxy, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: tfsec, ghaudit, paranoia, tigera-operator, wait-for-port, hcloud, grafana-operator, helm-push, mods, boring-registry, dgraph, tekton-chains, mage, direnv, rabbitmq-default-user-credential-updater, kaf, src-fingerprint, zot, go-md2man, prometheus-adapter, shfmt,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: tfsec, ghaudit, paranoia, tigera-operator, wait-for-port, hcloud, grafana-operator, helm-push, mods, boring-registry, dgraph, tekton-chains, mage, direnv, rabbitmq-default-user-credential-updater, kaf, src-fingerprint, zot, go-md2man, prometheus-adapter, shfmt,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, fluent-operator, rook, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: cilium-envoy, render-template, wait-for-port, go-licenses, helm-push, flannel-cni-plugin, nsc, sops, gops, aws-flb-firehose, cni-plugins, vertical-pod-autoscaler, dgraph, kubernetes-dashboard-metrics-scraper, mage, metrics-server, go-bindata, scorecard, ctop, oras,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: k3s, argo-cd, thanos-operator, dgraph, kaf, pulumi, zot, prometheus-adapter, gitness, nfs-subdir-external-provisioner, newrelic-infrastructure-agent, prometheus-node-exporter, kpt, prometheus-stackdriver-exporter, gomplate, metacontroller, tctl, thanos, kubevela,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: k3s, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, argo-cd, thanos-operator, gcsfuse, boring-registry, cilium, nuclei, dgraph, tekton-chains, kaf, pulumi, spire-server, doppler-kubernetes-operator, zot, prometheus-adapter, cri-tools, gitness,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-kustomize-controller, cert-manager, cosign, kubescape, restic, secrets-store-csi-driver-provider-azure, teleport, sqlpad, ksops, step, keda, sops, flux-image-reflector-controller, nuclei, boring-registry, chezmoi, tekton-chains, grafana-mimir,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-kustomize-controller, cert-manager, cosign, kubescape, restic, secrets-store-csi-driver-provider-azure, teleport, sqlpad, ksops, step, keda, sops, flux-image-reflector-controller, nuclei, boring-registry, chezmoi, tekton-chains, grafana-mimir,...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: k3d, restic, gke-gcloud-auth-plugin, wireguard-go, hey, go, grpcurl, falco,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, argo-cd, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, kube-rbac-proxy, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: tfsec, ghaudit, paranoia, tigera-operator, wait-for-port, hcloud, grafana-operator, helm-push, mods, boring-registry, dgraph, tekton-chains, mage, direnv, rabbitmq-default-user-credential-updater, kaf, src-fingerprint, zot, go-md2man, prometheus-adapter, shfmt,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, fluent-operator, rook, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: k3s, argo-cd, thanos-operator, dgraph, tekton-chains, kaf, pulumi, zot, prometheus-adapter, gitness, nfs-subdir-external-provisioner, newrelic-infrastructure-agent, prometheus-node-exporter, falco, nats, kpt, prometheus-stackdriver-exporter, gomplate, metacontroller,.....

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cosign, kubescape, argo-cd, gitsign, kaniko, keda, sops, crossplane, boring-registry, flux-notification-controller, flux-image-automation-controller, melange, tekton-chains, scorecard, actions-runner-controller, pulumi-kubernetes-operator,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, fluent-operator, rook, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: cilium-envoy, render-template, wait-for-port, go-licenses, helm-push, flannel-cni-plugin, nsc, sops, gops, aws-flb-firehose, cni-plugins, vertical-pod-autoscaler, dgraph, kubernetes-dashboard-metrics-scraper, mage, metrics-server, go-bindata, scorecard, ctop, oras,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: cilium-envoy, render-template, wait-for-port, go-licenses, helm-push, flannel-cni-plugin, nsc, sops, gops, aws-flb-firehose, cni-plugins, vertical-pod-autoscaler, dgraph, kubernetes-dashboard-metrics-scraper, mage, metrics-server, go-bindata, scorecard, ctop, oras,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: cilium-envoy, render-template, wait-for-port, go-licenses, helm-push, flannel-cni-plugin, nsc, sops, gops, aws-flb-firehose, cni-plugins, vertical-pod-autoscaler, dgraph, kubernetes-dashboard-metrics-scraper, mage, metrics-server, go-bindata, scorecard, ctop, oras,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: k3s, argo-cd, thanos-operator, dgraph, kaf, pulumi, zot, prometheus-adapter, gitness, nfs-subdir-external-provisioner, newrelic-infrastructure-agent, prometheus-node-exporter, kpt, prometheus-stackdriver-exporter, gomplate, metacontroller, tctl, thanos, kubevela,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: k3s, argo-cd, thanos-operator, dgraph, tekton-chains, kaf, pulumi, zot, prometheus-adapter, gitness, nfs-subdir-external-provisioner, newrelic-infrastructure-agent, prometheus-node-exporter, falco, nats, kpt, prometheus-stackdriver-exporter, gomplate, metacontroller,.....

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cert-manager, cilium-envoy, cosign, ko, kubescape, terraform, argo-cd, keda, dex, kubeflow-katib, oauth2-proxy, flux-notification-controller, dgraph, envoy-ratelimit, grype, src, metrics-server, scorecard, kubernetes-csi-livenessprobe,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: cilium-envoy, argo-cd, dgraph, kaf, pulumi, prometheus-adapter, gitness, nghttp2, newrelic-infrastructure-agent, falco, dotnet, nats, kpt, prometheus-stackdriver-exporter, gomplate, metacontroller, tctl, thanos, kubevela, node-problem-detector, aactl, haproxy-ingress,....

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: tfsec, ghaudit, paranoia, tigera-operator, wait-for-port, hcloud, grafana-operator, helm-push, mods, boring-registry, dgraph, tekton-chains, mage, direnv, rabbitmq-default-user-credential-updater, kaf, src-fingerprint, zot, go-md2man, prometheus-adapter, shfmt,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, fluent-operator, rook, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: k3s, kubescape, nerdctl, ingress-nginx-controller, kaniko, grype, docker, ctop, buildkitd, zot, wolfictl, nvidia-device-plugin, telegraf, newrelic-infrastructure-agent, k9s, datadog-agent, syft, k3d, runc, kots, skaffold, kubernetes, trivy, zarf, cadvisor,...

glibc - security update

Bulletin has no...

Malicious code in iobeya-time-utils (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (5cc94a15fd9feb4f7fd5146415061bfe386fd2d185f1e0d80fc3ecd40ce7adb2) The OpenSSF Package Analysis project identified 'iobeya-time-utils' @ 3.0.0 (npm) as malicious. It is considered malicious because: The package...

Exploit for Improper Authentication in Google Android

Bluepop CVE-2023-45866 Installation and Usage 🛠️...

Malicious code in kiln-desktop (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (ef3b624dee4eb3ef776b321ad28eddf3bc2d6cde2852fdcb47b0ef795047c6bf) The OpenSSF Package Analysis project identified 'kiln-desktop' @ 2.2.0 (npm) as malicious. It is considered malicious because: The package...

Malicious code in bageth (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (e0fb8d217f32446aeb4dbf744d45c5aadd152f0917a228ead1ad0183ac18b995) The OpenSSF Package Analysis project identified 'bageth' @ 2.0.0 (npm) as malicious. It is considered malicious because: The package communicates...

Google to Block Entrust Certificates in Chrome Starting November 2024

Google has announced that it's going to start blocking websites that use certificates from Entrust starting around November 1, 2024, in its Chrome browser, citing compliance failures and the certificate authority's inability to address security issues in a timely manner. "Over the past several...

CVE-2024-2386

The WordPress Plugin for Google Maps – WP MAPS plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'put_wpgm' shortcode in all versions up to, and including, 4.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-2386

The WordPress Plugin for Google Maps – WP MAPS plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'put_wpgm' shortcode in all versions up to, and including, 4.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-2386 WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection

The WordPress Plugin for Google Maps – WP MAPS plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'put_wpgm' shortcode in all versions up to, and including, 4.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-5819

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to DOM-based Stored Cross-Site Scripting via HTML data attributes in all versions up to, and including, 3.2.45 due to insufficient input sanitization and output escaping on user supplied...