openclarity

OpenClarity è uno strumento open source per il rilevamento e la gestione senza agente dei Software Bill Of Materials SBOM delle macchine virtuali e delle minacce alla sicurezza come vulnerabilità, exploit, malware, rootkit, configurazioni errate e segreti trapelati. Unisciti al canale Slack di...

kubei

Kubei is a flexible Kubernetes runtime scanner that scans worker nodes and Kubernetes nodes' images, providing accurate vulnerability assessments. It is a vulnerability scanner and CIS Docker scanner. The repository contains various files, including .dockerignore, .families.yaml,...

SQL Injection

github.com/openclarity/kubeclarity is vulnerable to SQL Injection. The vulnerability is due to manipulating the packageID parameter in the /api/applicationResources endpoint, where the fmt.Sprintf function is used to build the SQL query string without validating the input. It allows an attacker t...