Minter can censor GATEKEEPER and mint uncollateralized for a prolonged period of time

Lines of code Vulnerability details Impact Ethena explicitly mentions their protection against a compromised minter, the mentioned maximum loss is $100.000. The protection against a compromised minter rests on the GATEKEEPER role which is a system running on AWS set to remove the minter if mints...

Wrong estimation of acceptable risk of the protocol losses

Lines of code Vulnerability details Impact The protocol losses in case compromised MINTERS or REDEEMERS can be higher than expected due to the GATEKEEPER suppression. Attacker can frontrun the GATEKEEPER and fill block limit with own transactions while it is profitable. Average losses can be more...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, cortex, dgraph, kubernetes-csi-livenessprobe-fips, prometheus-adapter-fips, kubescape, terraform-provider-sendgrid, spark-operator, dynamic-localpv-provisioner-fips, plutono-fips, buildkitd, aactl, scorecard, aws-efs-csi-driver-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, buildkitd, dgraph, scorecard, src, kubescape, prometheus-blackbox-exporter, spark-operator, cortex, kubevela, terraform-provider-sendgrid, slsa-verifier, k3d, kubeflow, up...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: prometheus-adapter, up, caddy, rancher-webhook, kube-oidc-proxy, metrics-server-fips, kubernetes-fips, rancher-webhook-fips, kubernetes, kubevela, k3s, buildkitd...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: buildkitd, kubernetes, prometheus-adapter, up, caddy, kubevela, k3s...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, up, caddy, rancher-webhook, kube-oidc-proxy, metrics-server-fips, kubernetes-fips, rancher-webhook-fips, kubernetes, kubevela, k3s, buildkitd...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, prometheus-pushgateway, up, gke-gcloud-auth-plugin, prometheus-node-exporter-fips, cue, timoni, prometheus-bind-exporter, crossplane-provider-aws, weaviate, terraform, nri-prometheus, hey, kpt, kubernetes-csi-external-resizer,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, metrics-server, wireguard-go, ko, mc, nghttp2, buildkitd, flux-source-controller, gomplate, cortex, pulumi-language-yaml, kind, kots, hugo, sigstore-scaffolding, nginx-mainline, terraform-provider-azurerm, prometheus-blackbox-exporter, de...

CVE-2023-41067

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-41067

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40450

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40450

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

Design/Logic Flaw

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40450

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40450

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40450

The CVE-2023-40450 issue is described as a Gatekeeper bypass in macOS, fixed in macOS Sonoma 14. The Core detail: an app may bypass Gatekeeper checks, with Apple documenting a patch via “improved checks.” Connected sources corroborate this fix and note macOS Sonoma 14 as the affected/patched rele...

CVE-2023-41067

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-41067

A logic issue in Gatekeeper checks allowed an app to bypass Gatekeeper on macOS, fixed in macOS Sonoma 14. Affected: macOS Sonoma 14 and earlier with Gatekeeper checks bypass risk. CVE-2023-41067 impact involves local attacker with low complexity and low privileges; no user interaction required. ...