300 matches found
AZL-34963 CVE-2023-39325 affecting package local-path-provisioner for versions less than 0.0.24-3
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: prometheus-alertmanager, gke-gcloud-auth-plugin, gobuster, kube-logging-operator, prometheus-pushgateway, dex-k8s-authenticator, flux-helm-controller, prometheus-statsd-exporter-fips, buildkitd, src, stakater-reloader, dynamic-localpv-provisioner, k3d, git-lfs,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-livenessprobe, grpcurl, wireguard-go, terraform-provider-sendgrid, buildkitd, dgraph, git-lfs, kubescape, gitness, src, gobuster, kind, nodetaint, kots, flux-helm-controller, flux-notification-controller, conftest, skaffold, certificate-transparency,...
AZL-31324 CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-34964 CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
Malicious code in provisioner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718d5d2a9693c9cad48841157ec3ac3d6bb311b1849970dbca255db427043d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-703 Malicious code in provisioner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718d5d2a9693c9cad48841157ec3ac3d6bb311b1849970dbca255db427043d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, grpcurl, kubeflow, dynamic-localpv-provisioner, gke-gcloud-auth-plugin, k3d, wireguard-go, terraform-provider-sendgrid-fips, restic, terraform-provider-sendgrid, go, kubeflow-katib, dynamic-localpv-provisioner-fips, hey, kube-state-metrics...
GHSA-VVPX-J8F3-3W6H vulnerabilities
Vulnerabilities for packages: kubeflow-fips, grpcurl, kubeflow, dynamic-localpv-provisioner, gke-gcloud-auth-plugin, k3d, wireguard-go, terraform-provider-sendgrid-fips, restic, terraform-provider-sendgrid, go, kubeflow-katib, dynamic-localpv-provisioner-fips, hey, kube-state-metrics...
SUSE CVE-2020-8566
In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects v1.19.3, v1.18.10, v1.17.13...
GHSA-3839-6R69-M497 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...
CVE-2021-4238 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner...
CVE-2021-4238 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...
CVE-2021-38561 vulnerabilities
Vulnerabilities for packages: gitleaks, dynamic-localpv-provisioner, vt-cli, k3d, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, hey, terraform-provider-sendgrid...
CVE-2021-38561 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, gitleaks, vt-cli, terraform-provider-sendgrid, hey, k3d...
GHSA-69CH-W2M2-3VJP vulnerabilities
Vulnerabilities for packages: php-fpmexporter, dynamic-localpv-provisioner, grpcurl, gitleaks, vt-cli, terraform-provider-sendgrid, hey, kubeflow, k3d...
CVE-2022-32149 vulnerabilities
Vulnerabilities for packages: php-fpmexporter, dynamic-localpv-provisioner, grpcurl, gitleaks, vt-cli, terraform-provider-sendgrid, hey, kubeflow, k3d...
GHSA-GWC9-M7RH-J2WW vulnerabilities
Vulnerabilities for packages: k3d, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid...