564 matches found
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: cosign-fips, policy-controller-fips, snyk-cli, cosign, conftest-fips, k8sgpt, opa, policy-controller, spire-server, conftest, spire-server-fips, kubescape, kots, tfsec, zarf, zot...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: k8sgpt, zarf, tfsec, zot, conftest, spire-server, kots, cosign, snyk-cli, policy-controller, opa, kubescape...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: k8sgpt, zarf, tfsec, zot, conftest, spire-server, kots, cosign, snyk-cli, policy-controller, opa, kubescape...
Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2024-038)
The version of ecs-service-connect-agent installed on the remote host is prior to v1.29.6.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2024-038 advisory. dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context du...
Important: ecs-service-connect-agent
Issue Overview: dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws a...
Important: ecs-service-connect-agent
Issue Overview: dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws a...
Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-655)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-655 advisory. dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann...
Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories
Unknown threat actors have been found propagating trojanized versions of jQuery on npm, GitHub, and jsDelivr in what appears to be an instance of a "complex and persistent" supply chain attack. "This attack stands out due to the high variability across packages," Phylum said in an analysis...
GHSA-248V-346W-9CWC vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-13.2, dask-gateway, nvidia-nsight-compute-13.1, jwt-tool, k8s-sidecar, barman, kubeflow-jupyter-web-app, kubeflow-katib, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-pipelines, kubeflow-volumes-web-app, superset,...
GHSA-MH55-GQVF-XFWM vulnerabilities
Vulnerabilities for packages: fulcio, grafana-mimir, prometheus-alertmanager, cortex, rekor, timestamp-authority...
CVE-2024-39689 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-13.2, dask-gateway, nvidia-nsight-compute-13.1, jwt-tool, k8s-sidecar, barman, kubeflow-jupyter-web-app, kubeflow-katib, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-pipelines, kubeflow-volumes-web-app, superset,...
CVE-2024-38525
dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...
CVE-2024-38525 dd-trace-cpp malformed unicode header values may cause crash
dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...
CVE-2024-38525
CVE-2024-38525 affects dd-trace-cpp (Datadog tracing for C++). The root cause is that when trying to extract trace context from malformed unicode, the code logs audited headers/values using the nlohmann JSON library and triggers an uncaught exception, causing a crash. The vulnerability has been p...
GHSA-XFHP-JF8P-MH5W vulnerabilities
Vulnerabilities for packages: grype, terraform, zarf, wolfictl, tflint, zot, trivy, conftest, k9s, kots, snyk-cli, tfsec, terragrunt, kubescape...
GHSA-XFHP-JF8P-MH5W vulnerabilities
Vulnerabilities for packages: wolfictl, terraform, snyk-cli, grype, conftest-fips, terragrunt, trivy, trivy-fips, conftest, kubescape, kots, tfsec, k9s, zot, zarf, tflint...
CVE-2024-6257 vulnerabilities
Vulnerabilities for packages: wolfictl, terraform, snyk-cli, grype, conftest-fips, terragrunt, trivy, trivy-fips, conftest, kubescape, kots, tfsec, k9s, zot, zarf, tflint...
Malicious code in fluent_plugin-datadog-statsd (RubyGems)
--- -= Per source details. Do not edit below this line.=-...