426 matches found
GHSA-3WHM-J4XM-RV8X vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure, dbmate, aactl, kubernetes-csi-external-attacher, cosign, kapp, secrets-store-csi-driver-provider-gcp, glow, hivemind, secrets-store-csi-driver-provider-azure, lvm-driver, multus-cni, grpc-health-probe, melange, kyverno-notation-aws, chezmoi...
CVE-2025-22866 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure, dbmate, aactl, kubernetes-csi-external-attacher, cosign, kapp, secrets-store-csi-driver-provider-gcp, glow, hivemind, secrets-store-csi-driver-provider-azure, lvm-driver, multus-cni, grpc-health-probe, melange, kyverno-notation-aws, chezmoi...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: cosign-fips, gh, cosign, slsa-verifier...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: gh, cosign, slsa-verifier...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: gh, cosign, slsa-verifier...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: cosign-fips, gh, cosign, slsa-verifier...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: cosign-fips, kubescape, snyk-cli, cosign, spire-server, zot, policy-controller, conftest-fips, spire-server-fips, kots, opa, conftest, zarf, k8sgpt, tfsec, policy-controller-fips...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: zarf, kubescape, conftest, k8sgpt, opa, spire-server, snyk-cli, zot, kots, cosign, policy-controller, tfsec...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: zarf, kubescape, conftest, k8sgpt, opa, spire-server, snyk-cli, zot, kots, cosign, policy-controller, tfsec...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: cosign-fips, kubescape, snyk-cli, cosign, spire-server, zot, policy-controller, conftest-fips, spire-server-fips, kots, opa, conftest, zarf, k8sgpt, tfsec, policy-controller-fips...
openSUSE Security Advisory (SUSE-SU-2024:1486-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
cosign: Malicious artifects can cause machine-wide denial of service
A flaw was found in the Cosign package where maliciously crafted software artifacts can trigger uncontrolled resource consumption by allocating too much memory and starving out the system. A successful attack may result in a denial of service of the machine running Cosign, impacting availability...
cosign: Malicious attachments can cause system-wide denial of service
A flaw was found in the Cosign package where a malicious attachment may trigger uncontrolled resource consumption by allocating too much memory. This flaw allows an attacker to craft a malicious attachment, resulting in a denial of service, possibly impacting other applications running on the sam...
SUSE-SU-2024:1486-2 Security update for cosign
This update for cosign fixes the following issues: - CVE-2024-29902: Fixed denial of service on host machine via remote image with a malicious attachments bsc1222835 - CVE-2024-29903: Fixed denial of service on host machine via malicious software artifacts bsc1222837 Other fixes: - Updated to 2.2...
OPENSUSE-SU-2024:13402-1 cosign-2.2.1-1.1 on GA media
These are all security issues fixed in the cosign-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11860-1 cosign-1.5.2-1.1 on GA media
These are all security issues fixed in the cosign-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13646-1 cosign-2.2.3-1.1 on GA media
These are all security issues fixed in the cosign-2.2.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12331-1 cosign-1.12.0-1.1 on GA media
These are all security issues fixed in the cosign-1.12.0-1.1 package on the GA media of openSUSE Tumbleweed...