CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubeflow, step-ca, timoni, crossplane-provider-family-aws, prometheus-mongodb-exporter-fips, rabbitmq-cluster-operator, timestamp-authority-fips, pulumi-language-dotnet, kine, dex, kuberay-operator, grpc-health-probe, fuse-overlayfs-snapshotter, kaf, kube-bench-fips,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: syft, wolfictl, zot, kaniko, zarf, k3d, nerdctl, skopeo, cadvisor, buildkitd, kubernetes, skaffold, ctop, podman, k3s, newrelic-infrastructure-agent, runc, kots, kubescape, docker, trivy, k9s, grype...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: docker, k9s, skaffold, ctop, buildkitd, kaniko, nerdctl, runc, skopeo, newrelic-infrastructure-agent, podman, zarf, zot, k3d, trivy, kubescape, wolfictl, syft, grype, kubernetes, k3s, kots, cadvisor...

GHSA-5WJ4-WFFQ-3378 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GHSA-5WJ4-WFFQ-3378 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GHSA-FP9F-44C2-CW27 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2023-5044 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2023-5044 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

CVE-2023-5043 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2023-5043 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

Ingress NGINX Controller Injection Vulnerability

Ingress NGINX Controller is a Kubernetes open source entry controller for Kubernetes. A security vulnerability exists in Ingress NGINX Controller. An attacker can exploit this vulnerability to execute arbitrary commands...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, flux-source-controller, ip-masq-agent, nodetaint, rqlite, bom, pulumi-language-yaml, kubernetes-csi-livenessprobe, buildkitd, skaffold, envoy-ratelimit, kubeflow, terraform, dex, newrelic-infrastructure-agent, aws-efs-csi-driver, flux-helm-controller,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, flux-source-controller, ip-masq-agent, nodetaint, rqlite, bom, pulumi-language-yaml, kubernetes-csi-livenessprobe, buildkitd, skaffold, envoy-ratelimit, kubeflow, terraform, dex, newrelic-infrastructure-agent, aws-efs-csi-driver, flux-helm-controller,...

CVE-2021-25748

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the spec.rules.http.paths.path field of an Ingress object in the networking.k8s.io or extensions API group to obtain the credentials of...