EUVD-2023-0926

Malicious code in bioql PyPI...

Malicious code in cloudflared-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6406 Malicious code in cloudflared-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: caddy, karma, step-issuer, gogatekeeper, step, gitness, cloudflared, buf, kyverno-policy-reporter-ui, sftpgo, rclone, step-ca, tkn...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: step-fips, tkn-fips, gitness, step-issuer, step, rclone-fips, caddy, kyverno-policy-reporter-ui, telegraf, rclone, step-ca-fips, step-issuer-fips, sftpgo, caddy-fips, kyverno-policy-reporter-ui-fips, buf, karma, dapr-fips, tkn, step-ca, gogatekeeper, cloudflared, dap...

cloudflared-2024.12.1-1.1 on GA media (moderate)

cloudflared-2024.12.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14585-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

OPENSUSE-SU-2024:14585-1 cloudflared-2024.12.1-1.1 on GA media

These are all security issues fixed in the cloudflared-2024.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-PX8V-PP82-RCVR vulnerabilities

Vulnerabilities for packages: k3s, q, spegel, kubernetes-dns-node-cache-fips, eks-distro, caddy, cloudflared, traefik, caddy-fips, traefik-fips, frp, buf, kubernetes-dns-node-cache, eks-distro-fips...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: k3s, q, spegel, kubernetes-dns-node-cache-fips, eks-distro, caddy, cloudflared, traefik, caddy-fips, traefik-fips, frp, buf, kubernetes-dns-node-cache, eks-distro-fips...

GO-2022-0845 Local Privilege Escalation in cloudflared in github.com/cloudflare/cloudflared

Local Privilege Escalation in cloudflared in github.com/cloudflare/cloudflared...

GO-2023-1652 cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared

cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared...

GHSA-M9W6-WP3H-VQ8G vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, cloudflared...

CVE-2024-0874 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, cloudflared...

CVE-2024-22189 vulnerabilities

Vulnerabilities for packages: caddy, q, k3s, cloudflared...

GHSA-C33X-XQRF-C478 vulnerabilities

Vulnerabilities for packages: caddy, q, k3s, cloudflared...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, kargo, temporal-ui-server, falcoctl, zarf, guac, dex, skopeo, step, apko, policy-controller, aactl, minio, slsa-verifier, terragrunt, timestamp-authority, wolfictl, sops, fulcio, cosign, k3s, kubernetes-dashboard, argo-workflows,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: terragrunt, vault-k8s, cilium-cli, local-path-provisioner, cortex, melange, grpc-health-probe, dex, bank-vaults-fips, kubewatch, grype, flux-kustomize-controller, oauth2-proxy, tkn, supercronic, k3d, scorecard, crossplane-provider-aws-dynamodb,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: terragrunt, vault-k8s, cilium-cli, local-path-provisioner, cortex, melange, grpc-health-probe, dex, bank-vaults-fips, kubewatch, grype, flux-kustomize-controller, oauth2-proxy, tkn, supercronic, k3d, scorecard, crossplane-provider-aws-dynamodb,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: dex, aactl, slsa-verifier, terragrunt, sops, fulcio, cosign, oauth2-proxy, argo-workflows, rekor, tekton-chains, vexctl, cloudflared, tkn, kubescape, flux-kustomize-controller, gitsign, flux-source-controller, spire-server, kots...

Hackers Abusing Cloudflare Tunnels for Covert Communications

New research has revealed that threat actors are abusing Cloudflare Tunnels to establish covert communication channels from compromised hosts and retain persistent access. "Cloudflared is functionally very similar to ngrok," Nic Finn, a senior threat intelligence analyst at GuidePoint Security,...