MAL-2025-7051 Malicious code in @amber-team/create-loki-report (npm)

The package @amber-team/create-loki-report was found to contain malicious code...

Malicious code in @amber-team/create-loki-report (npm)

The package @amber-team/create-loki-report was found to contain malicious code...

Malicious code in loki-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75940c2d0ed836d2725549e9704eaefe1d989aa5349c7b27fdf2556be16e32a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5935 Malicious code in loki-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75940c2d0ed836d2725549e9704eaefe1d989aa5349c7b27fdf2556be16e32a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: velero, nri-rabbitmq, kubeflow-pipelines, pulumi-kubernetes-operator, minio, supercronic, go-bindata, tailscale, flux-image-automation-controller, kubevela, temporal, kube-state-metrics, pombump, litefs, vt-cli, sbom-scorecard, runc, cri-tools, kor, gobuster,...

Loki: a new private agent for the popular Mythic framework

In July 2024, we discovered the previously unknown Loki backdoor, which was used in a series of targeted attacks. By analyzing the malicious file and open sources, we determined that Loki is a private version of an agent for the open-source Mythic framework. One of the agent's decrypted strings O...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: velero, flux-image-reflector-controller, chezmoi, thanos, prometheus-operator, rook, trino, flyte, fulcio, argo-workflows, nuclei, opentelemetry-collector-contrib, terragrunt, goreleaser, bank-vaults, harbor-registry, policy-controller, hugo, sops, sqlpad, argo-event...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: buf, git-lfs, chezmoi, mkcert, gitness, docker-credential-acr-env, prometheus-redis-exporter, policy-controller-fips, conftest, external-secrets-fips, smarter-device-manager, metallb, azure-aad-pod-identity-mic, kiam, chartmuseum, direnv, kubebuilder, gostatsd, helm,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: k3s, helm-operator-fips, bom, flux-helm-controller, argo-workflows-fips, ctop, flux, kubeflow-katib, argo-workflows, eksctl, cadvisor-fips, policy-controller, up, ko-fips, policy-controller-fips, helm-fips, buildkitd, guac, trivy, flux-image-reflector-controller,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: k3s, helm-operator-fips, bom, flux-helm-controller, argo-workflows-fips, ctop, flux, kubeflow-katib, argo-workflows, eksctl, cadvisor-fips, policy-controller, up, ko-fips, policy-controller-fips, helm-fips, buildkitd, guac, trivy, flux-image-reflector-controller,...

CVE-2023-36649

Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...

CVE-2023-36649

Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...

CVE-2023-36649

Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...

Authentication flaw

Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...

CVE-2023-36649

Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...

CVE-2023-36649

ProLion CryptoSpike 3.0.15P2 is affected by an authentication/authorization issue arising from insertion of sensitive information into the centralized Grafana logging system, enabling remote attackers to impersonate other users in web management and REST API by reading JWT tokens from logs or the...

PT-2023-25652 · Grafana +1 · Loki +2

Name of the Vulnerable Software and Affected Versions: ProLion CryptoSpike version 3.0.15P2 Description: The issue allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Grafana authenticated user or from the Loki REST API withou...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: k3s, up, spire-server-fips, k3d, skaffold, tekton-chains, kpt, bom, paranoia, ctop, chartmuseum, slsa-verifier, kubescape, scorecard, aactl, falcoctl-fips...

CVE-2023-0813

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without...

CVE-2023-0813

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without...