62 matches found
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: buildkitd, docker-cli-buildx, wolfictl, helm, syft, k8sgpt, kubevela, melange, dagger, helm-operator, eksctl, osv-scanner, nerdctl, neuvector-scanner, cert-manager-cmctl, envoy-gateway, chartmuseum, ctop, flux-helm-controller, helm-push, grype, k3s, xeol, trivy,...
CVE-2022-36049
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
BIT-HELM-2022-36049 Flux2 Helm Controller denial of service
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: chartmuseum, cilium-cli, k9s, kubescape, trivy, helm-operator, helm-push, up, zot, flux-source-controller, kots, zarf, flux-helm-controller, k8sgpt, kubevela, eksctl...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: flux-source-controller, zarf, chartmuseum, trivy, zot, kots, flux-helm-controller, kubescape, helm-push, k8sgpt, k9s, helm-operator, kubevela, up, cilium-cli, eksctl...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: chartmuseum, cilium-cli, k9s, kubescape, trivy, helm-operator, helm-push, up, zot, flux-source-controller, kots, zarf, flux-helm-controller, k8sgpt, kubevela, eksctl...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: cosign-fips, trivy, helm-fips, dagger, helm-operator, cadvisor, argo-workflows-fips, slsa-verifier, timoni, rancher-machine, zarf, docker-machine-driver-harvester, ko-fips, kpt, kubevela, aactl, tekton-chains, ctop, falcoctl-fips, zot, scorecard, helm, skopeo,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: cosign-fips, trivy, helm-fips, dagger, helm-operator, cadvisor, argo-workflows-fips, slsa-verifier, timoni, rancher-machine, zarf, docker-machine-driver-harvester, ko-fips, kpt, kubevela, aactl, tekton-chains, ctop, falcoctl-fips, zot, scorecard, helm, skopeo,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, slsa-verifier, dynamic-localpv-provisioner-fips, prometheus-adapter-fips, terraform-provider-sendgrid-fips, kubevela, vault-csi-provider, aactl, src, timestamp-authority-fips, kube-oidc-proxy, falcoctl-fips,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: src, buildkitd, cortex, aactl, terraform-provider-sendgrid, kubescape, kubeflow, k3d, kubevela, scorecard, slsa-verifier, spark-operator, up, dgraph, prometheus-blackbox-exporter...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: ollama, cosign, helm, secrets-store-csi-driver, src, gomplate, conftest, grype, gke-gcloud-auth-plugin, slsa-verifier, metacontroller, nginx-stable, certificate-transparency, nghttp2, frp, amass, terraform-provider-aws, pulumi-kubernetes-operator, oauth2-proxy, dex,...
CVE-2023-2253 vulnerabilities
Vulnerabilities for packages: bom, argocd-image-updater-fips, kubernetes-dashboard, argocd-image-updater, kpt, aactl...
GHSA-HQXW-F8MX-CPMW vulnerabilities
Vulnerabilities for packages: bom, argocd-image-updater-fips, kubernetes-dashboard, argocd-image-updater, kpt, aactl...
CVE-2023-28841 vulnerabilities
Vulnerabilities for packages: apko, ko, bom, ctop, helm, melange, up...
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: apko, ko, bom, ctop, helm, melange, up...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: apko, ko, bom, ctop, helm, melange, up...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: apko, ko, bom, ctop, helm, melange, up...
CBL Mariner 2.0 Security Update: helm (CVE-2022-36049)
The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36049 advisory. - Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-...