GHSA-5PF6-2QWX-PXM2 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, falcosidekick, guac...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, temporal-server-fips, argo-workflows, step-ca, wavefront-collector-for-kubernetes, trillian-fips, kube-bench-fips, k3s, spicedb, trillian, ferretdb, argo-workflows-fips, temporal-server, step, caddy-fips, caddy, kine, kots, amass, kube-bench, src...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: argo-workflows, amass, kots, ferretdb, step, caddy, spicedb, temporal-server, trillian, k3s, src, kube-bench, step-ca, kine...

AZL-35660 CVE-2024-24786 affecting package keda for versions less than 2.14.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35579 CVE-2024-24786 affecting package keda for versions less than 2.4.0-24

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: argo-workflows, amass, kots, ferretdb, step, caddy, spicedb, temporal-server, trillian, k3s, src, kube-bench, step-ca, kine...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, temporal-server-fips, argo-workflows, step-ca, wavefront-collector-for-kubernetes, trillian-fips, kube-bench-fips, k3s, spicedb, trillian, ferretdb, argo-workflows-fips, temporal-server, step, caddy-fips, caddy, kine, kots, amass, kube-bench, src...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, temporal-server-fips, argo-workflows, step-ca, wavefront-collector-for-kubernetes, trillian-fips, kube-bench-fips, k3s, spicedb, trillian, ferretdb, argo-workflows-fips, temporal-server, step, caddy-fips, caddy, kine, kots, amass, kube-bench, src...

CVE-2021-44716 affecting package keda for versions less than 2.4.0-19

CVE-2021-44716 affecting package keda for versions less than 2.4.0-19. A patched version of the package is available...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, slsa-verifier, spire-server, policy-controller, crossplane-provider-aws-sqs, syft, gomplate, zot, argo-workflows, crossplane-provider-aws-rds, crossplane-provider-aws-iam, flux-notification-controller, crossplane-provider-family-aws,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: rekor, oauth2-proxy, slsa-verifier, fulcio-fips, spire-server, argo-workflows, fulcio, tkn, falcoctl-fips, flux-kustomize-controller, kubescape, cosign-fips, tekton-chains, bank-vaults-fips, cosign, vexctl, timestamp-authority-fips, terragrunt, spire-server-fips,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubevela, temporal-server, k3s, volume-modifier-for-k8s, kubernetes-csi-external-resizer, temporal, kubernetes, buildkitd, envoy-ratelimit, docker-compose, kubescape, metrics-server, kine, cri-tools...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, slsa-verifier, terraform-provider-sendgrid, up, kubernetes-csi-livenessprobe, kubeflow-fips, falcoctl-fips, kubescape, terraform-provider-sendgrid-fips, bank-vaults-fips, dynamic-localpv-provisioner-fips, kube-oidc-proxy, timestamp-authority-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: k3d, kubeflow, terraform-provider-sendgrid, scorecard, aactl, kubevela, cortex, up, src, dgraph, spark-operator, buildkitd, kubescape, slsa-verifier...

keda-exoticplants.nl Cross Site Scripting vulnerability OBB-3757840

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-44487 affecting package keda for versions less than 2.4.0-14

CVE-2023-44487 affecting package keda for versions less than 2.4.0-14. A patched version of the package is available...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, kubevela, caddy, up, k3s, kubernetes, buildkitd...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: caddy, metrics-server-fips, prometheus-adapter, rancher-webhook-fips, buildkitd, up, kubernetes-fips, k3s, kube-oidc-proxy, kubernetes, rancher-webhook, kubevela...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nats, kind, ollama, kubewatch, slsa-verifier, aactl, minio, pulumi, certificate-transparency, hey, nginx-stable, nri-prometheus, newrelic-infrastructure-agent, prometheus-adapter, grype, spark-operator, terraform, gke-gcloud-auth-plugin, secrets-store-csi-driver, dex...

AZL-34837 CVE-2023-44487 affecting package keda for versions less than 2.4.0-14

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...