CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: slsa-verifier, aactl, kubescape, goreleaser, zarf, neuvector-sigstore-interface, ko, falcoctl, melange, gitsign, policy-controller-fips, flux-source-controller, ko-fips, falcoctl-fips, zot, spire-server-fips, wolfictl, tekton-chains-fips, tkn-fips, policy-controller,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: slsa-verifier, aactl, kubescape, goreleaser, zarf, neuvector-sigstore-interface, ko, falcoctl, melange, gitsign, policy-controller-fips, flux-source-controller, ko-fips, falcoctl-fips, zot, spire-server-fips, wolfictl, tekton-chains-fips, tkn-fips, policy-controller,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: zarf, gitsign, falcoctl, kubescape, tkn, neuvector-sigstore-interface, slsa-verifier, melange, ko, goreleaser, aactl, zot, flux-source-controller, skaffold, wolfictl, vexctl, policy-controller, spire-server, tekton-chains, apko...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: crossplane, aactl, kubescape, buf, ctop, conftest-fips, ko, cilium-cli, cadvisor-fips, loki, kargo, dagger, docker-compose, kaniko, melange, zot, spire-server-fips, buildkitd, wolfictl, trivy, conftest, up, prometheus, spire-server, syft, cadvisor, grype, tkn...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: crossplane, aactl, kubescape, buf, ctop, conftest-fips, ko, cilium-cli, cadvisor-fips, loki, kargo, dagger, docker-compose, kaniko, melange, zot, spire-server-fips, buildkitd, wolfictl, trivy, conftest, up, prometheus, spire-server, syft, cadvisor, grype, tkn...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: caddy, kots, kubernetes-dashboard, skopeo, zarf, fulcio, gitsign, cloudflared, cosign, gomplate, terragrunt, grpc-health-probe, rekor, falcoctl, kubescape, tkn, sigstore-scaffolding, slsa-verifier, argo-workflows, temporal-ui-server, weaviate, melange, step, step-ca,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: minio, falcoctl, mc, mc-fips, falcoctl-fips, boring-registry-fips, spire-server-fips, spire-server, minio-fips, boring-registry, external-secrets-fips...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: minio, falcoctl, mc, mc-fips, falcoctl-fips, boring-registry-fips, spire-server-fips, spire-server, minio-fips, boring-registry, external-secrets-fips...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: falcoctl, vexctl, kubescape, gitsign, minio, boring-registry, spire-server, tekton-chains, mc...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: slsa-verifier, crossplane-provider-aws-memorydb, crossplane, crossplane-provider-aws-ec2, pulumi-language-dotnet, rclone, sops, aactl, kubescape, goreleaser, zarf, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudformation, gitness,...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: slsa-verifier, ko, melange, tekton-chains, flux-source-controller, falcoctl-fips, apko, aactl, kubescape, spire-server, spire-server-fips, cosign, policy-controller, skaffold, tkn...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: ko, kubescape, tkn, slsa-verifier, policy-controller, cosign, spire-server, aactl, melange, skaffold, flux-source-controller, tekton-chains, apko...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: ko, kubescape, tkn, slsa-verifier, policy-controller, cosign, spire-server, aactl, melange, skaffold, flux-source-controller, tekton-chains, apko...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: slsa-verifier, ko, melange, tekton-chains, flux-source-controller, falcoctl-fips, apko, aactl, kubescape, spire-server, spire-server-fips, cosign, policy-controller, skaffold, tkn...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: slsa-verifier, kpt, paranoia, chartmuseum, tekton-chains, up, falcoctl-fips, spire-server-fips, aactl, kubescape, bom, k3d, ctop, skaffold, scorecard, k3s...

CVE-2021-27098

In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 certificate with a URI SAN for a SPIFFE ID that the agent is not authorized to...