CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: nri-kubernetes, kaf, task, crossplane-provider-aws-firehose, certificate-transparency, petname, protoc-gen-go, go-licenses, fulcio, crossplane-provider-azure-managedidentity, croc, slsa-verifier, cluster-proportional-autoscaler, helm-push, go-bindata,...

MGASA-2024-0093 Updated clojure packages fix security vulnerability

An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service DoS via the clojure.core$partial$fn5920 function. CVE-2024-22871...

GHSA-592J-995H-P23J vulnerabilities

Vulnerabilities for packages: ruby, jruby...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: ko, conftest-fips, zot, spire-server, syft, kargo, conftest, kaniko, cadvisor-fips, melange, loki, kubescape, grype, trivy, buildkitd, wolfictl, spire-server-fips, aactl, buf, ctop, docker-compose, prometheus, up, cilium-cli, crossplane, tkn, cadvisor, dagger...

GHSA-G623-JCGG-MHMM vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: vault, spire-server, slsa-verifier, kargo, zarf, step, rancher-agent, policy-controller-fips, timestamp-authority, sigstore-scaffolding-fips, gitsign, melange, apko, kube-rbac-proxy-fips, fulcio-fips, flux-source-controller, aactl, neuvector-fips, falcoctl,...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: spire-server, mc, falcoctl-fips, minio-fips, boring-registry, spire-server-fips, external-secrets-fips, minio, boring-registry-fips, falcoctl, mc-fips...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: spicedb, k3s, caddy-fips, falcosidekick-fips, temporal-server-fips, kots, step, src, argo-workflows-fips, kine, trillian-fips, kube-bench-fips, trillian, kube-bench, step-ca, caddy, ferretdb, amass, temporal-server, argo-workflows, wavefront-collector-for-kubernetes...

CVE-2024-27289 vulnerabilities

Vulnerabilities for packages: trillian, argo-workflows-fips, caddy-fips, step-ca, kots, argo-workflows, step, trillian-fips, wavefront-collector-for-kubernetes, caddy...

GHSA-H3M7-RQC4-7H9P vulnerabilities

Vulnerabilities for packages: spicedb...

GHSA-6VQW-3V5J-54X4 vulnerabilities

Vulnerabilities for packages: ggshield, request-1276, mitmproxy, airflow, py3-cassandra-medusa, kubeflow-pipelines, py3-cryptography, az...

GHSA-X989-52FC-4VR4 vulnerabilities

Vulnerabilities for packages: hubble-fips, hubble-ui, hubble...

MGASA-2024-0045 Updated wireshark packages fix security vulnerabilities

The updated packages fix security vulnerabilities: RTPS dissector memory leak. CVE-2023-5371 SSH dissector invalid read of memory blocks. CVE-2023-6174 NetScreen File Parsing Heap-based Buffer Overflow. CVE-2023-6175 GVCP dissector crash via packet injection or crafted capture file. CVE-2024-0208...

CVE-2024-20982 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2024-20923 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: k8sgpt, zot, eksctl, up, cilium-cli, flux-source-controller, chartmuseum, helm-operator, kots, zarf, k9s, helm-push, kubescape, flux-helm-controller, trivy, kubevela...

CVE-2024-25062 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9...

GHSA-J86V-2VJR-FG8F vulnerabilities

Vulnerabilities for packages: etcd, dgraph, etcd-fips...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: cosign-fips, kubeflow-katib, zot, bom, slsa-verifier, k3s, nerdctl, guac, kargo, chartmuseum, zarf, kots, pulumi, cadvisor-fips, crane, newrelic-infrastructure-agent, policy-controller-fips, k8sgpt, scorecard, argo-workflows-fips, eksctl, gitsign, ko-fips, skaffold,...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: zot, syft, k3s, nerdctl, zarf, kots, kaniko, newrelic-infrastructure-agent, runc, skaffold, k9s, kubescape, grype, trivy, buildkitd, wolfictl, podman, ctop, skopeo, k3d, kubernetes, docker, cadvisor...