CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: nodetaint, ip-masq-agent, spark-operator, aws-efs-csi-driver, argocd-image-updater, kubernetes, kubeflow-pipelines, kubernetes-csi-driver-hostpath, local-static-provisioner, kubernetes-dns-node-cache...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, tkn, kots, kubernetes, up, actions-runner-controller, gomplate, prometheus-alertmanager, nri-kubernetes, runc, sonobuoy, hugo, flux-notification-controller, kwok, apisix-ingress-controller, helm-operator, syft, src, k3d, spiced...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k8sgpt-operator, external-secrets-fips, caddy, crossplane-provider-aws-sqs, flux-helm-controller, certificate-transparency, supercronic, falcoctl-fips, hugo, crossplane-provider-family-aws, crossplane-provider-aws-iam, aws-efs-csi-driver-fips,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, http-echo, nri-haproxy, nri-cassandra, up, actions-runner-controller, gomplate, nri-mysql, prometheus-alertmanager, hello-world-golang, runc, dask-gateway, sonobuoy, kwok, helm-operator, src, k3d, rqlite, cadvisor,...

CVE-2021-44716 affecting package csi-driver-lvm for versions less than 0.4.1-15

CVE-2021-44716 affecting package csi-driver-lvm for versions less than 0.4.1-15. A patched version of the package is available...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: helm-push, kubernetes-dashboard-metrics-scraper, smarter-device-manager, aws-flb-kinesis, ip-masq-agent, gops, grpcurl, nsc, nri-discovery-kubernetes, aactl, ctop, gke-gcloud-auth-plugin, aws-flb-cloudwatch, kubernetes-csi-livenessprobe,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, nodetaint, kubernetes-dns-node-cache, ip-masq-agent, prometheus-adapter, aws-efs-csi-driver, aws-ebs-csi-driver, spark-operator...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: nodetaint, ip-masq-agent, spark-operator, aws-efs-csi-driver, kubernetes-dns-node-cache, prometheus-adapter...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, nodetaint, kubernetes-dns-node-cache, ip-masq-agent, prometheus-adapter, aws-efs-csi-driver, aws-ebs-csi-driver, spark-operator...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: cri-tools, kubescape, docker-compose, temporal-server, k3s, buildkitd, kubernetes, kubevela, temporal, envoy-ratelimit, kubernetes-csi-external-resizer, volume-modifier-for-k8s, kine, metrics-server...

Important: Red Hat Bug Fix Advisory: LVMS 4.14.z Bug Fix and Enhancement update

Updated container images that fix multiple bugs are now available for LVMS 4.14.z. Logical volume manager storage LVMS uses the TopoLVM CSI driver to dynamically provision local storage on single node OpenShift clusters. Logical volume manager storage creates thin-provisioned volumes using the...

GHSA-7FXM-F474-HF8W vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, aws-efs-csi-driver-fips...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

CVE-2023-3676 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: plutono-fips, kubevela, aactl, kubernetes-csi-livenessprobe, kubeflow-fips, prometheus-stackdriver-exporter, scorecard, dgraph, src, terraform-provider-sendgrid-fips, up, kubescape, kiam, falcoctl-fips, smarter-device-manager-fips, vault-csi-provider,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, scorecard, spark-operator, kubescape, buildkitd, kubevela, up, kubeflow, dgraph, cortex, aactl, src, k3d, terraform-provider-sendgrid...

CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13

CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13. A patched version of the package is available...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k8sgpt-operator, terraform, kpt, minio, apko, frp, metacontroller, caddy, gke-gcloud-auth-plugin, kind, kubernetes-ingress-defaultbackend, prometheus-stackdriver-exporter, dgraph, src, falcoctl, flux-helm-controller, bom, aws-efs-csi-driver,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: spark-operator, kots, gomplate, hugo, flux-notification-controller, src, k3d, rqlite, flux-kustomize-controller, hey, skaffold, terraform, pulumi, fuse-overlayfs-snapshotter, kubeflow, ko, prometheus-adapter, atlantis, secrets-store-csi-driver, cortex, aactl,...