GHSA-82M2-CV7P-4M75 vulnerabilities

Vulnerabilities for packages: nodetaint, local-static-provisioner, aws-efs-csi-driver, k8s-device-plugin, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, ip-masq-agent, kubeflow-pipelines, spark-operator, cri-tools, argocd-image-updater...

CVE-2024-5321 vulnerabilities

Vulnerabilities for packages: nodetaint, local-static-provisioner, aws-efs-csi-driver, k8s-device-plugin, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, ip-masq-agent, kubeflow-pipelines, spark-operator, cri-tools, argocd-image-updater...

Backup Failing With `Too many snapshots` When Using Longhorn as a Storage Provisioner

Challenge Veeam Kasten for Kubernetes backup action for longhorn volumes fails with the error message: too many snapshots created Cause When integrating with CSI-based volumes, Veeam Kasten for Kubernetes employs VolumeSnapshot resources to create snapshots during backup operations. With Longhorn...

Sensitive Information leak via Log File in Kubernetes

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects v1.19.3, v1.18.10, v1.17.13...

AZL-38488 CVE-2023-45288 affecting package local-path-provisioner for versions less than 0.0.24-3

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, kyverno-policy-reporter, vexctl, kubernetes-csi-external-provisioner, ctop, bank-vaults, kubernetes-csi-driver-hostpath, cadvisor, golangci-lint, timoni, k3s, boring-registry, smarter-device-manager, kubernetes-dashboard-metrics-scrape...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, helm-operator, grype, terraform, dex-fips, kube-oidc-proxy, kyverno-policy-reporter, dex, pgpool2exporter-fips, boring-registry, dynamic-localpv-provisioner-fips, cass-operator, crossplane-provider-aws-sqs, aws-efs-csi-driver,...

CVE-2022-21698 affecting package local-path-provisioner for versions less than 0.0.21-14

CVE-2022-21698 affecting package local-path-provisioner for versions less than 0.0.21-14. A patched version of the package is available...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, slsa-verifier, buildkitd, prometheus-blackbox-exporter, src, kubevela, up, kubescape, k3d, spark-operator, dgraph, cortex, terraform-provider-sendgrid, scorecard, kubeflow...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow, cortex, kiam, scorecard, kube-oidc-proxy, dgraph, volume-modifier-for-k8s-fips, up, k3d, metrics-server-fips, prometheus-stackdriver-exporter, kubevela, falcoctl-fips, prometheus-adapter-fips, kubeflow-fips, conftest-fips, src, terraform-provider-sendgrid,...

AZL-34963 CVE-2023-39325 affecting package local-path-provisioner for versions less than 0.0.24-3

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, crossplane-provider-aws, pulumi-language-dotnet, git-lfs, gobuster, ollama, terraform, pulumi-language-java, kube-state-metrics-fips, kube-oidc-proxy, dex, kube-logging-logging-operator, tekton-chains, prometheus-node-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nats, nginx-mainline, slsa-verifier, gke-gcloud-auth-plugin, gobuster, cosign, fuse-overlayfs-snapshotter, metrics-server, scorecard, conftest, flux-source-controller, newrelic-infrastructure-agent, kubernetes-csi-livenessprobe, nghttp2, terraform, minio, grpcurl,...

AZL-31324 CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-34964 CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

Malicious code in provisioner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718d5d2a9693c9cad48841157ec3ac3d6bb311b1849970dbca255db427043d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-703 Malicious code in provisioner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718d5d2a9693c9cad48841157ec3ac3d6bb311b1849970dbca255db427043d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: kubeflow-fips, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid, hey, k3d, kube-state-metrics, terraform-provider-sendgrid-fips, kubeflow-katib, go, dynamic-localpv-provisioner-fips, grpcurl, wireguard-go, restic, gke-gcloud-auth-plugin...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: kubeflow-fips, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid, hey, k3d, kube-state-metrics, terraform-provider-sendgrid-fips, kubeflow-katib, go, dynamic-localpv-provisioner-fips, grpcurl, wireguard-go, restic, gke-gcloud-auth-plugin...

SUSE CVE-2020-8566

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects v1.19.3, v1.18.10, v1.17.13...