GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: bom, gitsign, pulumi-kubernetes-operator, gitness, goreleaser, nuclei, src-fingerprint, scorecard, go-licenses...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: scorecard, gitness, gitsign, nuclei, src-fingerprint, goreleaser, bom, go-licenses, pulumi-kubernetes-operator...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: tkn, boring-registry, kubevela, sops, grype, crossplane-provider-aws-cloudformation, cosign, pulumi-language-dotnet, zot, goreleaser, flux-kustomize-controller, crossplane-provider-aws-ec2, pulumi-kubernetes-operator, actions-runner-controller, skaffold, zarf,...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: argo-workflows, flux-notification-controller, snyk-cli, task, argo-events-fips, melange, argo-events, pulumi-kubernetes-operator...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: snyk-cli, melange, argo-workflows, argo-events, flux-notification-controller, pulumi-kubernetes-operator, task...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: argo-workflows, flux-notification-controller, snyk-cli, task, argo-events-fips, melange, argo-events, pulumi-kubernetes-operator...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: snyk-cli, melange, argo-workflows, argo-events, flux-notification-controller, pulumi-kubernetes-operator, task...

Secret logging may occur in debug mode of Atlas Operator

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

Design/Logic Flaw

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

CVE-2023-0436 Secret logging may occur in debug mode of Atlas Operator

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, kubeflow, kubevela, src, prometheus-stackdriver-exporter, spark-operator, buildkitd, k3d, vault-csi-provider, volume-modifier-for-k8s-fips, aactl, smarter-device-manager-fips, terraform-provider-sendgrid, kubeflow-fips, metrics-server-fips, slsa-verifier, kia...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, k3d, aactl, cortex, buildkitd, terraform-provider-sendgrid, up, dgraph, spark-operator, slsa-verifier, kubescape, kubeflow, src, kubevela...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubeflow, git-lfs, buildkitd, atlantis, kubewatch, skaffold, wireguard-go, nats, flux-notification-controller, flux-image-automation-controller, prometheus-operator, oauth2-proxy, stakater-reloader, smarter-device-manager-fips, newrelic-infrastructure-agent,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubewatch, weaviate, wireguard-go, scorecard, memcached-exporter, terraform-provider-azurerm, nodetaint, newrelic-infrastructure-agent, pulumi-kubernetes-operator, nginx-mainline, kind, secrets-store-csi-driver, hugo, prometheus-adapter, sigstore-scaffolding, git-lfs...

Moderate: Red Hat Security Advisory: VolSync 0.5.4 security fixes and enhancements

VolSync v0.5.4 security fixes and enhancements Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

MongoDB 日志信息泄露漏洞

MongoDB is a document-oriented database management system from the U.S.-based MongoDB, Inc. A log information disclosure vulnerability exists in the MongoDB Atlas Kubernetes Operator, which originates from printing sensitive information such as GCP service account keys and API integration secrets...

CBL Mariner 2.0 Security Update: helm (CVE-2022-36049)

The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36049 advisory. - Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-...

CVE-2022-36049

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

CVE-2022-36049 Flux2 Helm Controller denial of service

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

Moderate: Red Hat Security Advisory: VolSync 0.5 security fixes and updates

VolSync v0.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. VolSync v0.5 VolSyn...