GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: conftest-fips, buildkitd, zot, kaniko, kubescape, conftest, scorecard, trivy, guac, docker, skaffold...

GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: kaniko, conftest, guac, kubescape, zot, trivy, buildkitd, skaffold, scorecard, docker...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: kaniko, conftest, guac, kubescape, zot, trivy, buildkitd, skaffold, scorecard, docker...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: kaniko, conftest, guac, kubescape, zot, trivy, buildkitd, skaffold, scorecard, docker...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: conftest-fips, buildkitd, zot, kaniko, kubescape, conftest, scorecard, trivy, guac, docker, skaffold...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: conftest-fips, buildkitd, zot, kaniko, kubescape, conftest, scorecard, trivy, guac, docker, skaffold...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: conftest-fips, buildkitd, zot, kaniko, kubescape, conftest, scorecard, trivy, guac, docker, skaffold...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: kaniko, conftest, guac, kubescape, zot, trivy, buildkitd, skaffold, scorecard, docker...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: conftest-fips, buildkitd, zot, kaniko, kubescape, conftest, scorecard, trivy, guac, docker, skaffold...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: kaniko, conftest, guac, kubescape, zot, trivy, buildkitd, skaffold, scorecard, docker...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, spark-operator, metrics-server-fips, slsa-verifier, prometheus-stackdriver-exporter, cortex, aactl, kiam, buildkitd, smarter-device-manager-fips, up, scorecard, kubernetes-csi-livenessprobe-fips, src, prometheus-blackbox-exporter, dgraph,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, spark-operator, slsa-verifier, src, kubeflow, kubescape, k3d, dgraph, terraform-provider-sendgrid, up, buildkitd, scorecard, aactl, cortex...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cue, flux-kustomize-controller, terraform-provider-sendgrid, prometheus-adapter, nghttp2, secrets-store-csi-driver-provider-gcp, sigstore-scaffolding, flux-source-controller, aactl, fuse-overlayfs-snapshotter, memcached-exporter, kind, buildkitd,...

GHSA-J77R-2FXF-5JRW Improper path handling in kustomization files allows path traversal

The kustomize-controller enables the use of Kustomize’s functionality when applying Kubernetes declarative state onto a cluster. A malicious user can use built-in features and a specially crafted kustomization.yaml to expose sensitive data from the controller’s pod filesystem. In multi-tenancy...

Improper path handling in kustomization files allows path traversal

The kustomize-controller enables the use of Kustomize’s functionality when applying Kubernetes declarative state onto a cluster. A malicious user can use built-in features and a specially crafted kustomization.yaml to expose sensitive data from the controller’s pod filesystem. In multi-tenancy...