GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, terraform, amass, pulumi-language-java, spark-operator, cortex, pulumi-language-dotnet, dex, certificate-transparency, kubescape, kubernetes-csi-livenessprobe, secrets-store-csi-driver, buildkitd, gomplate, frp, helm, envoy-ratelimit,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, terraform, amass, pulumi-language-java, spark-operator, cortex, pulumi-language-dotnet, dex, certificate-transparency, kubescape, kubernetes-csi-livenessprobe, secrets-store-csi-driver, buildkitd, gomplate, frp, helm, envoy-ratelimit,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, terraform, prometheus-stackdriver-exporter, amass, kube-oidc-proxy, atlantis-fips, prometheus-adapter-fips, pulumi-language-java, spark-operator, cortex, timestamp-authority-fips, pulumi-language-dotnet, node-problem-detector, dex,...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...