GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: pulumi, flux-helm-controller, grpcurl, hugo, nats, dynamic-localpv-provisioner, ko, kind, kots, gomplate, kubernetes-csi-livenessprobe, flux-kustomize-controller, ollama, gitness, git-lfs, src, kubeflow-katib, cosign, kubevela, nghttp2, memcached-exporter, bom, k3d,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: pulumi, flux-helm-controller, grpcurl, hugo, nats, dynamic-localpv-provisioner, ko, kind, kots, gomplate, kubernetes-csi-livenessprobe, flux-kustomize-controller, ollama, gitness, git-lfs, src, kubeflow-katib, cosign, kubevela, nghttp2, memcached-exporter, bom, k3d,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, flux-helm-controller, grype, skaffold, vault-csi-provider, pulumi, k3d, nri-prometheus, rqlite, buildkitd, ip-masq-agent, mc, aws-efs-csi-driver, gitness, metrics-server, git-lfs, cue, kube-state-metrics, kind, ollama,...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...