228 matches found
AZL-42904 CVE-2024-6104 affecting package keda for versions less than 2.14.0-2
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
AZL-42637 CVE-2024-35255 affecting package keda for versions less than 2.14.1-1
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: sigstore-scaffolding, sqlpad, nuclei, buildkitd, flux, rekor, falcoctl, fulcio, velero, sops, opentelemetry-collector-contrib, py3-cassandra-medusa, restic, spire-server, cortex, step-ca, wal-g, chezmoi, boring-registry, flyte, kubescape, timestamp-authority, zot,...
Low: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update
Custom Metrics Autoscaler Operator for Red Hat OpenShift including security updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...
CVE-2022-3162 affecting package keda for versions less than 2.14.0-1
CVE-2022-3162 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-44716 affecting package keda for versions less than 2.14.0-1
CVE-2021-44716 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-28180 affecting package keda for versions less than 2.14.0-1
CVE-2024-28180 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-21698 affecting package keda for versions less than 2.14.0-1
CVE-2022-21698 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-24786 affecting package keda for versions less than 2.14.0-1
CVE-2024-24786 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...
Moderate: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-376 Bug Fixes
Custom Metrics Autoscaler Operator for Red Hat OpenShift including security updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...
CVE-2023-44487 affecting package keda for versions less than 2.4.0-14
CVE-2023-44487 affecting package keda for versions less than 2.4.0-14. A patched version of the package is available...
AZL-35882 CVE-2024-28180 affecting package keda for versions less than 2.14.0-1
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if t...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: slsa-verifier, sigstore-scaffolding, gitsign, rekor, kots, grpc-health-probe, rabbitmq-messaging-topology-operator, falcoctl, caddy, fulcio, frp, sops, apko, oauth2-proxy, zarf, step-ca, spire-server, kubernetes-dashboard, ko, kubescape, minio, gomplate,...
AZL-35843 CVE-2024-28180 affecting package keda for versions less than 2.4.0-26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if t...
GHSA-C5Q2-7R4C-MV6G vulnerabilities
Vulnerabilities for packages: slsa-verifier, sigstore-scaffolding, gitsign, rekor, kots, grpc-health-probe, rabbitmq-messaging-topology-operator, falcoctl, caddy, fulcio, frp, sops, apko, oauth2-proxy, zarf, step-ca, spire-server, kubernetes-dashboard, ko, kubescape, minio, gomplate,...
GHSA-C5Q2-7R4C-MV6G vulnerabilities
Vulnerabilities for packages: guac, temporal, cloudflared, cosign-fips, vault, minio, aactl, rekor-fips, falcoctl, policy-controller, fulcio, slsa-verifier, temporal-fips, ko-fips, argo-workflows, rook, tkn, terragrunt, kargo, fulcio-fips, argo-workflows-fips, ko, zot, sigstore-scaffolding-fips,...
CVE-2024-28110 vulnerabilities
Vulnerabilities for packages: falcosidekick, guac, falcosidekick-fips...
GHSA-5PF6-2QWX-PXM2 vulnerabilities
Vulnerabilities for packages: falcosidekick, guac, falcosidekick-fips...