Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kaf, caddy, dataplaneapi, aws-flb-kinesis, minio, nats, nuclei, q, configmap-reload, kind, argo-workflows, pulumi-kubernetes-operator, kustomize, mockery, petname, dynamic-localpv-provisioner, gomplate, go-md2man, kubernetes-csi-external-provisioner, src-fingerprint,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kaf, caddy, dataplaneapi, aws-flb-kinesis, minio, nats, nuclei, q, configmap-reload, kind, argo-workflows, pulumi-kubernetes-operator, kustomize, mockery, petname, dynamic-localpv-provisioner, gomplate, go-md2man, kubernetes-csi-external-provisioner, src-fingerprint,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: dataplaneapi, nats, kubernetes, petname, git-sync, age, kubecolor, src-fingerprint, aactl, stakater-reloader, argo-rollouts, kubernetes-ingress-defaultbackend, wave, lazydocker, confluent-common-docker, tflint, vault-benchmark, kwok, tfsec, kube-rbac-proxy,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: wazero, nfs-subdir-external-provisioner-fips, caddy, dive, kor, rqlite, envoy-ratelimit-fips, trillian, doppler-kubernetes-operator, dagger, pulumi-language-yaml, cass-operator-fips, dex-k8s-authenticator, kube-oidc-proxy, velero, dex, volume-modifier-for-k8s,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, oauth2-proxy, cass-operator-fips, dex, dynamic-localpv-provisioner-fips, wave, karpenter, kustomize, kyverno-policy-reporter-kyverno-plugin, secrets-store-csi-driver-provider-gcp, go-bindata, vt-cli, hubble-ui-backend-fips, bank-vaults, hey,...

Mongoose populate Code Execution

The vulnerability of the populate function in the Mongoose library is related to improper code generation when using the $where operator. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain access to read and modify data...

Mongoose Library SQL Injection

The vulnerability of the Mongoose library relates to the lack of protection for the SQL query structure when the $where operator is used. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain access to read and modify data...

sendabienesraices.com Improper Access Control vulnerability OBB-4027564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SSRF in sliver teamserver

Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...

Important: Red Hat Security Advisory: Cluster Observability Operator 1.0.0

The Cluster Observability Operator COO is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions CRDs. With this release, COO gets to GA availability...

control-messe.de Cross Site Scripting vulnerability OBB-4024543

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Low: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...

Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...