549 matches found
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: influx, nats, cni-plugins, trillian, wait-for-port, speedtest-go, skaffold, rqlite, pombump, argo-workflows, s5cmd, prometheus-operator, vite, newrelic-infrastructure-agent, hubble-ui, mage, go-bindata, src-fingerprint, dockerize, kubernetes-dashboard-metrics-scraper...
Doppler announces integration with Datadog to streamline security and monitoring
San Francisco, United States / California, 30th January 2025, CyberNewsWire...
Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining
The infamous cryptojacking group known as TeamTNT appears to be readying for a new large-scale campaign targeting cloud-native environments for mining cryptocurrencies and renting out breached servers to third-parties. "The group is currently targeting exposed Docker daemons to deploy Sliver...
GHSA-5VVG-PVHP-HV2M vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2024-49750 vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: snyk-cli, policy-controller, zarf, zot, kots, kubescape, conftest-fips, cosign, k8sgpt, policy-controller-fips, tfsec, spire-server-fips, spire-server, conftest, opa, cosign-fips...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: zot, tfsec, conftest, policy-controller, kots, k8sgpt, spire-server, kubescape, zarf, opa, snyk-cli, cosign...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: zot, tfsec, conftest, policy-controller, kots, k8sgpt, spire-server, kubescape, zarf, opa, snyk-cli, cosign...
Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2024-038)
The version of ecs-service-connect-agent installed on the remote host is prior to v1.29.6.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2024-038 advisory. dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context du...
Important: ecs-service-connect-agent
Issue Overview: dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws a...
Important: ecs-service-connect-agent
Issue Overview: dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws a...
Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-655)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-655 advisory. dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann...
Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories
Unknown threat actors have been found propagating trojanized versions of jQuery on npm, GitHub, and jsDelivr in what appears to be an instance of a "complex and persistent" supply chain attack. "This attack stands out due to the high variability across packages," Phylum said in an analysis...
GHSA-248V-346W-9CWC vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, request-1276, k8s-sidecar, superset, checkov, jwt-tool, kubeflow-katib, mlflow, barman, nvidia-nsight-compute-13.1, py3-cassandra-medusa, kubeflow-jupyter-web-app, py3-certifi, py3-pipenv, dask-gateway, kubeflow-pipelines-visualization-server,...
GHSA-MH55-GQVF-XFWM vulnerabilities
Vulnerabilities for packages: timestamp-authority, cortex, fulcio, grafana-mimir, prometheus-alertmanager, rekor...
CVE-2024-39689 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, request-1276, k8s-sidecar, superset, checkov, jwt-tool, kubeflow-katib, mlflow, barman, nvidia-nsight-compute-13.1, py3-cassandra-medusa, kubeflow-jupyter-web-app, py3-certifi, py3-pipenv, dask-gateway, kubeflow-pipelines-visualization-server,...
CVE-2024-38525
dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...
CVE-2024-38525
CVE-2024-38525 affects dd-trace-cpp (Datadog tracing for C++). The root cause is that when trying to extract trace context from malformed unicode, the code logs audited headers/values using the nlohmann JSON library and triggers an uncaught exception, causing a crash. The vulnerability has been p...
CVE-2024-38525 dd-trace-cpp malformed unicode header values may cause crash
dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...