CVE-2024-35255 affecting package keda for versions less than 2.14.1-1

CVE-2024-35255 affecting package keda for versions less than 2.14.1-1. An upgraded version of the package is available that resolves this issue...

Moderate: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat 2.14.1-467 OpenShift Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift Security Update to fix Moderate CVE-2024-24791 The Custom Metrics Autoscaler Operator for Red Hat OpenShift is an optional operator based upon the Kubernetes Event Driven Autoscaler KEDA, which allows workloads to be scaled by using...

CVE-2024-24786 affecting package keda for versions less than 2.4.0-24

CVE-2024-24786 affecting package keda for versions less than 2.4.0-24. A patched version of the package is available...

CVE-2022-32149 affecting package keda for versions less than 2.4.0-23

CVE-2022-32149 affecting package keda for versions less than 2.4.0-23. A patched version of the package is available...

CVE-2024-6104 affecting package keda for versions less than 2.4.0-22

CVE-2024-6104 affecting package keda for versions less than 2.4.0-22. A patched version of the package is available...

CVE-2024-6104 affecting package keda for versions less than 2.14.0-2

CVE-2024-6104 affecting package keda for versions less than 2.14.0-2. A patched version of the package is available...

CVE-2021-32923 affecting package keda for versions less than 2.14.0-1

CVE-2021-32923 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42248 affecting package keda for versions less than 2.14.0-1

CVE-2021-42248 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-38561 affecting package keda for versions less than 2.14.0-1

CVE-2021-38561 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42836 affecting package keda for versions less than 2.14.0-1

CVE-2021-42836 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1996 affecting package keda for versions less than 2.14.0-1

CVE-2022-1996 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...

CBL Mariner 2.0 Security Update: cert-manager / containerized-data-importer / cri-o / dcos-cli / keda / kubernetes (CVE-2024-28180)

The version of cert-manager / containerized-data-importer / cri-o / dcos-cli / keda / kubernetes installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28180 advisory. - Package jose aims to provide an...

AZL-42942 CVE-2024-6104 affecting package keda for versions less than 2.4.0-22

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

AZL-42904 CVE-2024-6104 affecting package keda for versions less than 2.14.0-2

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: airflow, grafana-mimir, prometheus-operator, cortex, fluent-bit-plugin-loki, terragrunt, hugo-extended, wal-g, fulcio, rclone, secrets-store-csi-driver-provider-azure, goreleaser, boring-registry, flux-source-controller, nuclei, druid, cosign, tekton-chains, step,...

AZL-42637 CVE-2024-35255 affecting package keda for versions less than 2.14.1-1

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

Low: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift including security updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...

CVE-2024-24786 affecting package keda for versions less than 2.14.0-1

CVE-2024-24786 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44716 affecting package keda for versions less than 2.14.0-1

CVE-2021-44716 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...