CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: cosign, falcoctl, sops, apko, zot, kube-rbac-proxy, vexctl, flux-source-controller, rook, nerdctl, kargo, timestamp-authority, step, policy-controller, step-ca, kubescape, spire-server, flux-kustomize-controller, oauth2-proxy, aactl, rekor,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: spire-server-fips, falcoctl, minio-fips, mc, external-secrets-fips, spire-server, boring-registry, mc-fips, falcoctl-fips, minio, boring-registry-fips...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: spire-server-fips, falcoctl, minio-fips, mc, external-secrets-fips, spire-server, boring-registry, mc-fips, falcoctl-fips, minio, boring-registry-fips...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: kubescape, spire-server, falcoctl, boring-registry, vexctl, tekton-chains, mc, minio, gitsign...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: vexctl, gitsign, kubescape, falcoctl, tekton-chains, falcoctl-fips, cosign-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, kubevela, up, kubernetes-csi-livenessprobe, scorecard, kubeflow, volume-modifier-for-k8s-fips, prometheus-adapter-fips, plutono-fips, prometheus-stackdriver-exporter, metrics-server-fips, aws-efs-csi-driver-fips, terraform-provider-sendgrid-fips,...

SUSE CVE-2019-13509

In Docker CE and EE before 18.09.8 as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10, Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. I...

In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10) Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.

...

DEBIAN-CVE-2019-13509

In Docker CE and EE before 18.09.8 as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10, Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. I...