Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via httprequester.go and httpdownloader.go‎. An attacker can access internal network resources and exfiltrate sensitive data by crafting malicious promotion templates or Promotion resources that trigger...

CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: kine, aws-otel-collector, kargo, jaeger, kserve, k8sgateway, argo-rollouts, argo-workflows, splunk-otel-collector, kubeflow-pipelines, coredns, verticadb-operator, vale, argo-cd, grafana-alloy, amazon-cloudwatch-agent, opentelemetry-collector-contrib, k3s,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: kine, aws-otel-collector, kargo, jaeger, kserve, k8sgateway, argo-rollouts, argo-workflows, splunk-otel-collector, kubeflow-pipelines, coredns, verticadb-operator, vale, argo-cd, grafana-alloy, amazon-cloudwatch-agent, opentelemetry-collector-contrib, k3s,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, elastic-agent-fips, coredns-fips, grafana-alloy-fips, splunk-otel-collector, argo-workflows, aws-otel-collector, nats, nrdot-collector-k8s, amazon-cloudwatch-agent-fips, grafana-alloy, nrdot-collector-k8s-fips, argo-rollouts,...