181 matches found
GHSA-7FXM-F474-HF8W vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, aws-efs-csi-driver-fips...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...
CVE-2023-3676 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: falcoctl-fips, kubevela, bank-vaults-fips, kubescape, vault-csi-provider, metrics-server-fips, kubernetes-csi-livenessprobe-fips, plutono-fips, kubeflow-fips, up, conftest-fips, kube-oidc-proxy, spark-operator, k3d, volume-modifier-for-k8s-fips,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: slsa-verifier, spark-operator, up, buildkitd, k3d, cortex, dgraph, kubescape, kubeflow, scorecard, aactl, kubevela, terraform-provider-sendgrid, src...
CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13
CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13. A patched version of the package is available...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: azure-aad-pod-identity-mic, secrets-store-csi-driver, nats, dynamic-localpv-provisioner, dive, up, kpt, crossplane-provider-azure, kube-fluentd-operator, helm, kube-logging-logging-operator, pulumi-kubernetes-operator, kaf, kubernetes-csi-external-provisioner, runc,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, fuse-overlayfs-snapshotter, ko, pulumi-language-yaml, atlantis, stakater-reloader, kubeflow, flux-notification-controller, src, gke-gcloud-auth-plugin, dynamic-localpv-provisioner, pulumi, conftest, cosign, gitness,...
AZL-31305 CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
GHSA-CGCV-5272-97PR vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver...
CVE-2023-2728 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver...
GHSA-XC8M-28VV-4PJC vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver...
CVE-2023-2431 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver...
Insertion Of Sensitive Information Into Log File
sigs.k8s.io/secrets-store-csi-driver is vulnerable to Insertion of Sensitive Information Into Log File. An attacker with access to the driver logs could observe service account tokens due to the NodePublishVolume function of nodeserver.go...
CVE-2023-2878 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver...
CVE-2023-2878
Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs...
CVE-2023-2878 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver, vault-csi-provider...
CVE-2023-2878
CVE-2023-2878 affects Kubernetes secrets-store-csi-driver. The vulnerability occurs in versions before 1.3.3, where the driver discloses service account tokens in logs. This could allow an attacker with local access or log access to read leaked tokens, enabling impersonation of the associated ser...
