1949 matches found
PT-2024-38065 · Red Hat · Openshift Console
Name of the Vulnerable Software and Affected Versions: Openshift console affected versions not specified Description: A flaw was found in the Openshift console, specifically in the /API/helm/verify endpoint, which is responsible for fetching and verifying the installation of a Helm chart from a...
CVE-2024-7079: Missing Authentication for Critical Function
A flaw was found in the Openshift console. The /API/helm/verify endpoint is tasked to fetch and verify the installation of a Helm chart from a URI that is remote HTTP/HTTPS or local. Access to this endpoint is gated by the authHandlerWithUser middleware function. Contrary to its name, this...
CVE-2023-45288 affecting package helm for versions less than 3.15.2-1
CVE-2023-45288 affecting package helm for versions less than 3.15.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-44487 affecting package helm for versions less than 3.15.2-1
CVE-2023-44487 affecting package helm for versions less than 3.15.2-1. An upgraded version of the package is available that resolves this issue...
Moderate: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.6 security update
An update is now available for Red Hat OpenShift GitOps v1.11.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
SQL Injection in the KubeClarity REST API
Summary A time/boolean SQL Injection is present in the following resource /api/applicationResources via the following parameter packageID Details As it can be seen here, while building the SQL Query the fmt.Sprintf function is used to build the query string without the input having first been...
GHSA-5248-H45P-9PGW SQL Injection in the KubeClarity REST API
Summary A time/boolean SQL Injection is present in the following resource /api/applicationResources via the following parameter packageID Details As it can be seen here, while building the SQL Query the fmt.Sprintf function is used to build the query string without the input having first been...
RHEL 9 : helm (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short,...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.1 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2024-26147)
The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26147 advisory. - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an...
CBL Mariner 2.0 Security Update: cert-manager / helm / moby-cli / moby-compose / moby-engine (CVE-2023-2253)
The version of cert-manager / helm / moby-cli / moby-compose / moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2253 advisory. - A flaw was found in the /v2/catalog endpoint in...
CVE-2024-24791 vulnerabilities
Vulnerabilities for packages: spegel, kyverno-policy-reporter-ui, crane, ytt, gcsfuse, src-fingerprint, eksctl, kube-rbac-proxy-fips, ollama, libnvidia-container, render-template, kots, chartmuseum-fips, direnv, docker-credential-ecr-login, vt-cli, cloudnative-pg, nri-redis, xcaddy, kiam, runc,...
Dependency management path traversal in helm
...
CVE-2024-26147 affecting package helm for versions less than 3.13.2-3
CVE-2024-26147 affecting package helm for versions less than 3.13.2-3. An upgraded version of the package is available that resolves this issue...
CVE-2024-25620 affecting package helm for versions less than 3.13.2-3
CVE-2024-25620 affecting package helm for versions less than 3.13.2-3. An upgraded version of the package is available that resolves this issue...
OPENSUSE-SU-2024:13708-1 helm-3.14.2-1.1 on GA media
These are all security issues fixed in the helm-3.14.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12252-1 helm-3.9.3-1.1 on GA media
These are all security issues fixed in the helm-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12345-1 helm-3.9.4-3.1 on GA media
These are all security issues fixed in the helm-3.9.4-3.1 package on the GA media of openSUSE Tumbleweed...