145 matches found
GHSA-HQ6Q-C2X6-HMCH vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, ip-masq-agent, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, spark-operator, aws-efs-csi-driver, prometheus-adapter, nodetaint...
CVE-2023-5528 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, ip-masq-agent, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, spark-operator, aws-efs-csi-driver, prometheus-adapter, nodetaint...
CVE-2023-47108 vulnerabilities
Vulnerabilities for packages: temporal-server, volume-modifier-for-k8s, docker-compose, buildkitd, envoy-ratelimit, kubevela, k3s, kubernetes-csi-external-resizer, kubescape, metrics-server, cri-tools, temporal, kubernetes, kine...
Important: Red Hat Bug Fix Advisory: LVMS 4.14.z Bug Fix and Enhancement update
Updated container images that fix multiple bugs are now available for LVMS 4.14.z. Logical volume manager storage LVMS uses the TopoLVM CSI driver to dynamically provision local storage on single node OpenShift clusters. Logical volume manager storage creates thin-provisioned volumes using the...
GHSA-7FXM-F474-HF8W vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...
CVE-2023-3676 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, aws-efs-csi-driver-fips, kubeflow-pipelines...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: aactl, slsa-verifier, buildkitd, prometheus-blackbox-exporter, src, kubevela, up, kubescape, k3d, spark-operator, dgraph, cortex, terraform-provider-sendgrid, scorecard, kubeflow...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubeflow, cortex, kiam, scorecard, kube-oidc-proxy, dgraph, volume-modifier-for-k8s-fips, up, k3d, metrics-server-fips, prometheus-stackdriver-exporter, kubevela, falcoctl-fips, prometheus-adapter-fips, kubeflow-fips, conftest-fips, src, terraform-provider-sendgrid,...
CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13
CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13. A patched version of the package is available...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: aws-load-balancer-controller-fips, crossplane-provider-aws, pulumi-language-dotnet, git-lfs, gobuster, ollama, terraform, pulumi-language-java, kube-state-metrics-fips, kube-oidc-proxy, dex, kube-logging-logging-operator, tekton-chains, prometheus-node-exporter,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: nats, nginx-mainline, slsa-verifier, gke-gcloud-auth-plugin, gobuster, cosign, fuse-overlayfs-snapshotter, metrics-server, scorecard, conftest, flux-source-controller, newrelic-infrastructure-agent, kubernetes-csi-livenessprobe, nghttp2, terraform, minio, grpcurl,...
AZL-31305 CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
GHSA-CGCV-5272-97PR vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver...
CVE-2023-2728 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver...
GHSA-XC8M-28VV-4PJC vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver...
CVE-2023-2431 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver...
Insertion Of Sensitive Information Into Log File
sigs.k8s.io/secrets-store-csi-driver is vulnerable to Insertion of Sensitive Information Into Log File. An attacker with access to the driver logs could observe service account tokens due to the NodePublishVolume function of nodeserver.go...
