Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via httprequester.go and httpdownloader.go‎. An attacker can access internal network resources and exfiltrate sensitive data by crafting malicious promotion templates or Promotion resources that trigger...

CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: kine, k8sgateway, verticadb-operator, nats, kargo, amazon-cloudwatch-agent, argo-workflows, opentelemetry-collector, opentelemetry-collector-contrib, k8sgpt, kubeflow-pipelines, jaeger, argo-rollouts, coredns, splunk-otel-collector, datadog-agent, kserve, k3s, argo-c...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: kine, k8sgateway, verticadb-operator, nats, kargo, amazon-cloudwatch-agent, argo-workflows, opentelemetry-collector, opentelemetry-collector-contrib, k8sgpt, kubeflow-pipelines, jaeger, argo-rollouts, coredns, splunk-otel-collector, datadog-agent, kserve, k3s, argo-c...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, coredns, nats, verticadb-operator-fips, elastic-agent-fips, nats-fips, tempo, datadog-agent-fips, opentelemetry-collector, argo-workflows-fips, jaeger, argo-rollouts, splunk-otel-collector-fips, verticadb-operator, argo-cd-fips,...