Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

CVE-2024-45338 affecting package keda for versions less than 2.14.1-2

CVE-2024-45338 affecting package keda for versions less than 2.14.1-2. A patched version of the package is available...

CVE-2024-45338 affecting package keda for versions less than 2.4.0-25

CVE-2024-45338 affecting package keda for versions less than 2.4.0-25. A patched version of the package is available...

AZL-54407 CVE-2024-45338 affecting package keda for versions less than 2.14.1-2

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54562 CVE-2024-45338 affecting package keda for versions less than 2.4.0-25

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-52239 CVE-2024-51744 affecting package keda for versions less than 2.4.0-29

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

AZL-52201 CVE-2024-51744 affecting package keda for versions less than 2.14.1-7

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

CVE-2024-35255 affecting package keda for versions less than 2.14.1-1

CVE-2024-35255 affecting package keda for versions less than 2.14.1-1. An upgraded version of the package is available that resolves this issue...

Moderate: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat 2.14.1-467 OpenShift Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift Security Update to fix Moderate CVE-2024-24791 The Custom Metrics Autoscaler Operator for Red Hat OpenShift is an optional operator based upon the Kubernetes Event Driven Autoscaler KEDA, which allows workloads to be scaled by using...

CVE-2024-24786 affecting package keda for versions less than 2.4.0-24

CVE-2024-24786 affecting package keda for versions less than 2.4.0-24. A patched version of the package is available...

CVE-2022-32149 affecting package keda for versions less than 2.4.0-23

CVE-2022-32149 affecting package keda for versions less than 2.4.0-23. A patched version of the package is available...

CVE-2024-6104 affecting package keda for versions less than 2.4.0-22

CVE-2024-6104 affecting package keda for versions less than 2.4.0-22. A patched version of the package is available...

CVE-2024-6104 affecting package keda for versions less than 2.14.0-2

CVE-2024-6104 affecting package keda for versions less than 2.14.0-2. A patched version of the package is available...

CVE-2021-42248 affecting package keda for versions less than 2.14.0-1

CVE-2021-42248 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1996 affecting package keda for versions less than 2.14.0-1

CVE-2022-1996 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42836 affecting package keda for versions less than 2.14.0-1

CVE-2021-42836 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-38561 affecting package keda for versions less than 2.14.0-1

CVE-2021-38561 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-32923 affecting package keda for versions less than 2.14.0-1

CVE-2021-32923 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: cert-manager / containerized-data-importer / cri-o / dcos-cli / keda / kubernetes (CVE-2024-28180)

The version of cert-manager / containerized-data-importer / cri-o / dcos-cli / keda / kubernetes installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28180 advisory. - Package jose aims to provide an...

CBL Mariner 2.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...