GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, snyk-cli, argo-events-fips, argo-workflows, pulumi-kubernetes-operator, melange, task, argo-events...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: snyk-cli, argo-events, pulumi-kubernetes-operator, task, argo-workflows, flux-notification-controller, melange...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, snyk-cli, argo-events-fips, argo-workflows, pulumi-kubernetes-operator, melange, task, argo-events...

Secret logging may occur in debug mode of Atlas Operator

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

Design/Logic Flaw

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

CVE-2023-0436 Secret logging may occur in debug mode of Atlas Operator

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, k3d, dgraph, kubevela, slsa-verifier, spark-operator, src, up, buildkitd, terraform-provider-sendgrid, aactl, kubescape, kubeflow, cortex, scorecard...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, terraform-provider-sendgrid-fips, kiam, scorecard, falcoctl-fips, kubescape, up, src, kubeflow, metrics-server-fips, dynamic-localpv-provisioner-fips, aws-efs-csi-driver-fips, kube-oidc-proxy, prometheus-blackbox-exporter, conftest-fips,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: weaviate, crossplane-provider-aws, cosign, kiam, nodetaint, gitness, nri-prometheus, prometheus-node-exporter-fips, wavefront-collector-for-kubernetes, kpt, kube-oidc-proxy, kube-state-metrics-fips, dive, terraform-provider-sendgrid, memcached-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nodetaint, prometheus-adapter, flux-notification-controller, kpt, k3d, metrics-server, secrets-store-csi-driver-provider-gcp, cortex, nghttp2, grpcurl, pulumi-kubernetes-operator, flux-source-controller, metacontroller, pulumi-language-dotnet, mc, stakater-reloader,...

Moderate: Red Hat Security Advisory: VolSync 0.5.4 security fixes and enhancements

VolSync v0.5.4 security fixes and enhancements Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

MongoDB 日志信息泄露漏洞

MongoDB is a document-oriented database management system from the U.S.-based MongoDB, Inc. A log information disclosure vulnerability exists in the MongoDB Atlas Kubernetes Operator, which originates from printing sensitive information such as GCP service account keys and API integration secrets...

CBL Mariner 2.0 Security Update: helm (CVE-2022-36049)

The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36049 advisory. - Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-...

CVE-2022-36049

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

CVE-2022-36049 Flux2 Helm Controller denial of service

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

Moderate: Red Hat Security Advisory: VolSync 0.5 security fixes and updates

VolSync v0.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. VolSync v0.5 VolSyn...

MongoDB Enterprise Kubernetes Operator Trust Management Issue Vulnerability

MongoDB Enterprise Kubernetes Operator is a tool from US-based MongoDB that supports deployment of MongoDB in Kubernetes clusters. The product also supports the ability to manage, monitor and backup MongoDB. A trust management issue vulnerability exists in MongoDB Enterprise Kubernetes Operator...

Improper access control

X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kubernetes cluster improper access to MongoDB instances. Customers who do not use X.509 authentication, and those who do not use the Operator to generate their X.509 certificates ar...

CVE-2020-7922

CVE-2020-7922 affects MongoDB Enterprise Kubernetes Operator. Summary: X.509 certificates generated by the operator may allow an attacker with access to a Kubernetes cluster to gain improper access to MongoDB instances. Affected versions are Operator 1.0–1.1, 1.2 pre-1.2.4, 1.3 pre-1.3.1, and 1.4...

PT-2020-19848 · Mongodb · Mongodb Enterprise Kubernetes Operator

Name of the Vulnerable Software and Affected Versions: MongoDB Enterprise Kubernetes Operator versions 1.0 through 1.1 MongoDB Enterprise Kubernetes Operator version 1.2 through 1.2.3 MongoDB Enterprise Kubernetes Operator version 1.3 through 1.3.0 MongoDB Enterprise Kubernetes Operator version 1...