GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: amass, flux-kustomize-controller, terraform-provider-aws, helm, atlantis, kubeflow-katib, kpt, cosign, pulumi-language-dotnet, skaffold, pulumi-language-java, fuse-overlayfs-snapshotter, spark-operator, sigstore-scaffolding, metacontroller, k3d, hey,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: amass, flux-kustomize-controller, terraform-provider-aws, helm, atlantis, kubeflow-katib, kpt, cosign, pulumi-language-dotnet, skaffold, pulumi-language-java, fuse-overlayfs-snapshotter, spark-operator, sigstore-scaffolding, metacontroller, k3d, hey,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: dgraph, nats, weaviate, terraform-provider-sendgrid-fips, atlantis-fips, aws-efs-csi-driver-fips, pulumi-kubernetes-operator, kind, node-problem-detector, certificate-transparency, slsa-verifier, terraform-provider-aws, pulumi, nginx-mainline, oauth2-proxy,...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...