235 matches found
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: caddy-fips, hubble-ui, prometheus-redis-exporter, kubernetes-csi-driver-hostpath, logstash-exporter-fips, node-problem-detector, crossplane-provider-gcp, etcd, supercronic, kubernetes-dashboard-metrics-scraper-fips, nodetaint, kubernetes-event-exporter, buildkitd,...
CVE-2022-21698 affecting package local-path-provisioner for versions less than 0.0.21-14
CVE-2022-21698 affecting package local-path-provisioner for versions less than 0.0.21-14. A patched version of the package is available...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubeflow-fips, prometheus-adapter-fips, metrics-server-fips, kubevela, dgraph, src, aws-efs-csi-driver-fips, volume-modifier-for-k8s-fips, slsa-verifier, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, kubernetes-csi-livenessprobe, falcoctl-fips,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: aactl, spark-operator, cortex, kubevela, slsa-verifier, src, up, terraform-provider-sendgrid, dgraph, scorecard, kubescape, buildkitd, kubeflow, k3d...
AZL-34963 CVE-2023-39325 affecting package local-path-provisioner for versions less than 0.0.24-3
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: go, flux-image-reflector-controller, kube-state-metrics, prometheus-mysqld-exporter, atlantis, node-problem-detector, dive, newrelic-infrastructure-agent, prometheus-elasticsearch-exporter-fips, nodetaint, kots, kubernetes-dashboard, prometheus-alertmanager, buildkit...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: aactl, memcached-exporter, kubernetes-csi-livenessprobe, pulumi, sigstore-scaffolding, kubeflow-katib, metacontroller, kubewatch, spark-operator, terraform-provider-sendgrid, certificate-transparency, nghttp2, slsa-verifier, helm, buildkitd, prometheus-adapter, cue,...
AZL-34964 CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-31324 CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
Malicious code in provisioner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718d5d2a9693c9cad48841157ec3ac3d6bb311b1849970dbca255db427043d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-703 Malicious code in provisioner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718d5d2a9693c9cad48841157ec3ac3d6bb311b1849970dbca255db427043d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: hey, kubeflow-fips, kubeflow-katib, go, dynamic-localpv-provisioner, grpcurl, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, kubeflow, wireguard-go, restic, terraform-provider-sendgrid, kube-state-metrics, gke-gcloud-auth-plugin, k3d...
GHSA-VVPX-J8F3-3W6H vulnerabilities
Vulnerabilities for packages: hey, kubeflow-fips, kubeflow-katib, go, dynamic-localpv-provisioner, grpcurl, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, kubeflow, wireguard-go, restic, terraform-provider-sendgrid, kube-state-metrics, gke-gcloud-auth-plugin, k3d...
SUSE CVE-2020-8566
In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects v1.19.3, v1.18.10, v1.17.13...
GHSA-3839-6R69-M497 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...
CVE-2021-4238 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner...
CVE-2021-4238 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...
CVE-2021-38561 vulnerabilities
Vulnerabilities for packages: gitleaks, terraform-provider-sendgrid, vt-cli, dynamic-localpv-provisioner, hey, k3d...
CVE-2021-38561 vulnerabilities
Vulnerabilities for packages: hey, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, vt-cli, terraform-provider-sendgrid, gitleaks, k3d...