458 matches found
GHSA-MQ39-4GV4-MVPX vulnerabilities
Vulnerabilities for packages: zot, kargo, conftest-fips, cilium-cli, trivy, conftest, up, crossplane, loki, ko, spire-server, dagger, prometheus, melange, grype, kubescape, cadvisor-fips, buf, tkn, syft, spire-server-fips, kaniko, buildkitd, wolfictl, docker-compose, ctop, cadvisor, aactl...
BIT-GITLAB-2021-22260
A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the...
BIT-GITLAB-2022-2534
An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was returning contributor emails due to improper data handling in the Datadog integration...
BIT-GITLAB-2022-3018
An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs...
BIT-GITLAB-2023-0483
An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible for a project maintainer to extract a Datadog integration API key by modifying the site...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: docker-compose, sonobuoy, crossplane-provider-family-azure, prometheus-adapter, memcached-exporter, kubernetes-dns-node-cache, temporal-ui-server, chartmuseum, cluster-proportional-autoscaler, crossplane-provider-aws-kms, nfs-subdir-external-provisioner, k3d,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: prometheus-node-exporter, rabbitmq-cluster-operator, kubernetes-event-exporter, kustomize, src, kwok, kubewatch, crossplane-provider-family-aws, wavefront-collector-for-kubernetes, logstash-exporter, mc, flux-image-reflector-controller, terraform-provider-sendgrid,...
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: nri-mysql, sonobuoy, prometheus-adapter, oras, memcached-exporter, nri-redis, nri-cassandra, kubernetes-dns-node-cache, temporal-ui-server, chartmuseum, cluster-proportional-autoscaler, nfs-subdir-external-provisioner, kind, yam, k3d, spark-operator,...
GHSA-77HH-43CM-V8J6 vulnerabilities
Vulnerabilities for packages: datadog-agent...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: zot, kubevela, ko-fips, policy-controller-fips, argo-workflows, docker-credential-gcr, kargo, kubeflow-katib, rancher-machine, kpt, k3s, flux-helm-controller, trivy, guac, docker-machine-driver-harvester, crane, helm-operator, k9s, up, flux-image-reflector-controller...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: zot, kubevela, ko-fips, policy-controller-fips, argo-workflows, docker-credential-gcr, kargo, kubeflow-katib, rancher-machine, kpt, k3s, flux-helm-controller, trivy, guac, docker-machine-driver-harvester, crane, helm-operator, k9s, up, flux-image-reflector-controller...
GHSA-M3R6-H7WV-7XXV vulnerabilities
Vulnerabilities for packages: buildkitd, conftest, guac, skaffold, scorecard, docker, zot, kaniko, trivy, kubescape...
GHSA-4V98-7QMW-RQR8 vulnerabilities
Vulnerabilities for packages: zot, scorecard, conftest-fips, kaniko, buildkitd, skaffold, kubescape, trivy, conftest, guac, docker...
GHSA-4V98-7QMW-RQR8 vulnerabilities
Vulnerabilities for packages: buildkitd, conftest, guac, skaffold, scorecard, docker, zot, kaniko, trivy, kubescape...
CVE-2024-23651 vulnerabilities
Vulnerabilities for packages: zot, scorecard, conftest-fips, kaniko, buildkitd, skaffold, kubescape, trivy, conftest, guac, docker...
CVE-2024-23652 vulnerabilities
Vulnerabilities for packages: zot, scorecard, conftest-fips, kaniko, buildkitd, skaffold, kubescape, trivy, conftest, guac, docker...
CVE-2024-23651 vulnerabilities
Vulnerabilities for packages: buildkitd, conftest, guac, skaffold, scorecard, docker, zot, kaniko, trivy, kubescape...
CVE-2024-23652 vulnerabilities
Vulnerabilities for packages: buildkitd, conftest, guac, skaffold, scorecard, docker, zot, kaniko, trivy, kubescape...