GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator...

GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, thanos-operator, thanos-operator-fips...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, thanos-operator, thanos-operator-fips...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator...

GHSA-8C26-WMH5-6G9V vulnerabilities

Vulnerabilities for packages: k3d, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow-fips...

GHSA-8C26-WMH5-6G9V vulnerabilities

Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, k3d, terraform-provider-sendgrid...

CVE-2022-27191 vulnerabilities

Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, k3d, terraform-provider-sendgrid...

GHSA-CG3Q-J54F-5P7P vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

GHSA-CG3Q-J54F-5P7P vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

CVE-2022-21698 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

CVE-2022-21698 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

AZL-33612 CVE-2021-44716 affecting package local-path-provisioner for versions less than 0.0.21-16

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...

GHSA-XG2H-WX96-XGXR vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

GHSA-XG2H-WX96-XGXR vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

Security Bulletin: Open Source Secuity issues fixed for NPS softlayer provisioner.

Summary Fixed OSS issus for listed CVEs. Vulnerability Details CVEID: CVE-2020-7919 DESCRIPTION: Go is vulnerable to a denial of service. By sending a malformed X.509 certificate, a remote attacker could exploit this vulnerability to cause a system panic. CVSS Base score: 7.5 CVSS Temporal Score:...

AZL-41878 CVE-2020-8565 affecting package local-path-provisioner for versions less than 0.0.24-5

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects = v1.19.3, = v1.18.10, = v1.17.13, v1.20.0-alpha2...

CVE-2020-8566

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects v1.19.3, v1.18.10, v1.17.13...

CVE-2020-8566

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects v1.19.3, v1.18.10, v1.17.13...

CVE-2020-8566

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects v1.19.3, v1.18.10, v1.17.13...

Inclusion of Sensitive Information in Log Files

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims...