trustee 安全漏洞

trustee is an open source component of Confidential Containers. A security vulnerability exists in trustee versions prior to 0.15.0, which stems from an attestation-policy endpoint that does not validate the identity of a kbs-client, which could result in an arbitrary kbs-client modifying the...

CVE-2024-35238

Minder by Stacklok is an open source software supply chain security platform. Minder prior to version 0.0.51 is vulnerable to a denial-of-service DoS attack which could allow an attacker to crash the Minder server and deny other users access to it. The root cause of the vulnerability is that...