GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: argo-workflows, k3s, kots, step-ca, temporal-server, amass, kube-bench, caddy, step, src, spicedb, ferretdb, kine, trillian...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, trillian, kube-bench-fips, kine, step-ca, kube-bench, spicedb, argo-workflows-fips, trillian-fips, falcosidekick-fips, src, ferretdb, temporal-server-fips, k3s, temporal-server, step, caddy, kots, amass, caddy-fips, argo-workflows...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, trillian, kube-bench-fips, kine, step-ca, kube-bench, spicedb, argo-workflows-fips, trillian-fips, falcosidekick-fips, src, ferretdb, temporal-server-fips, k3s, temporal-server, step, caddy, kots, amass, caddy-fips, argo-workflows...

CVE-2021-44716 affecting package keda for versions less than 2.4.0-19

CVE-2021-44716 affecting package keda for versions less than 2.4.0-19. A patched version of the package is available...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, boring-registry, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, pulumi-language-yaml, pulumi-language-java, spire-server, crossplane-provider-aws-lambda, flux-kustomize-controller, apko,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: spire-server, bank-vaults-fips, oauth2-proxy, cloudflared, flux-kustomize-controller, tkn, cosign-fips, aactl, terragrunt, fulcio-fips, tekton-chains, rekor, kubescape, flux-source-controller, dex, timestamp-authority-fips, spire-server-fips, fulcio, slsa-verifier,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, k3s, metrics-server, buildkitd, kubernetes, temporal-server, kubescape, envoy-ratelimit, kubevela, temporal, kine, cri-tools, kubernetes-csi-external-resizer, docker-compose...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, k3d, kubeflow, buildkitd, dgraph, terraform-provider-sendgrid, scorecard, cortex, src, kubescape, spark-operator, kubevela, aactl, up...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: smarter-device-manager-fips, k3d, cortex, kubernetes-csi-livenessprobe, bank-vaults-fips, prometheus-blackbox-exporter, volume-modifier-for-k8s-fips, prometheus-adapter-fips, kube-oidc-proxy, buildkitd, kubeflow-fips, kubeflow, aactl, spark-operator,...

keda-exoticplants.nl Cross Site Scripting vulnerability OBB-3757840

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-44487 affecting package keda for versions less than 2.4.0-14

CVE-2023-44487 affecting package keda for versions less than 2.4.0-14. A patched version of the package is available...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, kubernetes, kubernetes-fips, kubevela, metrics-server-fips, k3s, buildkitd, rancher-webhook, up, prometheus-adapter, kube-oidc-proxy, caddy...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: k3s, buildkitd, kubernetes, caddy, prometheus-adapter, kubevela, up...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, secrets-store-csi-driver-provider-gcp, k3d, certificate-transparency, kots, kind, metacontroller, ollama, flux-notification-controller, memcached-exporter, dynamic-localpv-provisioner, ko, conftest, kubescape, minio, gomplate, hugo,...

AZL-34837 CVE-2023-44487 affecting package keda for versions less than 2.4.0-14

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-31316 CVE-2023-44487 affecting package keda for versions less than 2.4.0-14

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

Moderate: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift (with security updates)

Custom Metrics Autoscaler Operator for Red Hat OpenShift including security updates. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

AZL-34838 CVE-2022-3162 affecting package keda for versions less than 2.14.0-1

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...

AZL-13781 CVE-2022-3162 affecting package keda for versions less than 2.4.0-29

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...

AZL-34839 CVE-2022-32149 affecting package keda for versions less than 2.14.0-1

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...