GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: atlantis, kubewatch, gobuster, nri-prometheus, pulumi-kubernetes-operator, wireguard-go, kind, nginx-stable, metrics-server, kpt, kubernetes-csi-livenessprobe, kubescape, mc, dgraph, kubeflow-katib, nghttp2, ko, secrets-store-csi-driver, oauth2-proxy, ollama,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: atlantis, kubewatch, gobuster, nri-prometheus, pulumi-kubernetes-operator, wireguard-go, kind, nginx-stable, metrics-server, kpt, kubernetes-csi-livenessprobe, kubescape, mc, dgraph, kubeflow-katib, nghttp2, ko, secrets-store-csi-driver, oauth2-proxy, ollama,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, terraform-provider-sendgrid, nfs-subdir-external-provisioner-fips, ko, nginx-stable, grype, kubeflow-katib, git-lfs, kubernetes-csi-livenessprobe, aws-efs-csi-driver, volume-modifier-for-k8s-fips, pulumi, ollama, gitness, atlantis, mc,...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...