CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: buildkitd, conftest, trivy, conftest-fips, guac, kaniko, scorecard, skaffold, zot, docker, kubescape...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: buildkitd, kaniko, docker, kubescape, skaffold, trivy, guac, conftest, zot, scorecard...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: buildkitd, kaniko, docker, kubescape, skaffold, trivy, guac, conftest, zot, scorecard...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: buildkitd, conftest, trivy, conftest-fips, guac, kaniko, scorecard, skaffold, zot, docker, kubescape...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: buildkitd, conftest, trivy, conftest-fips, guac, kaniko, scorecard, skaffold, zot, docker, kubescape...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: buildkitd, kaniko, docker, kubescape, skaffold, trivy, guac, conftest, zot, scorecard...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: buildkitd, conftest, trivy, conftest-fips, guac, kaniko, scorecard, skaffold, zot, docker, kubescape...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: buildkitd, kaniko, docker, kubescape, skaffold, trivy, guac, conftest, zot, scorecard...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falcoctl-fips, src, kubevela, prometheus-blackbox-exporter, bank-vaults-fips, up, kubernetes-csi-livenessprobe-fips, kiam, vault-csi-provider, buildkitd, kubeflow, timestamp-authority-fips, scorecard, prometheus-adapter-fips, metrics-server-fips, dgraph, kubescape,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: buildkitd, k3d, terraform-provider-sendgrid, aactl, kubescape, dgraph, slsa-verifier, spark-operator, kubeflow, prometheus-blackbox-exporter, cortex, up, kubevela, src, scorecard...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, pulumi-language-java, newrelic-infrastructure-agent, pulumi, kind, cue, src, kubeflow, aws-efs-csi-driver, flux-notification-controller, aactl, terraform-provider-aws, gobuster, haproxy-ingress, nats, terraform-provider-azurerm,...

Improper path handling in kustomization files allows path traversal

The kustomize-controller enables the use of Kustomize’s functionality when applying Kubernetes declarative state onto a cluster. A malicious user can use built-in features and a specially crafted kustomization.yaml to expose sensitive data from the controller’s pod filesystem. In multi-tenancy...

GHSA-J77R-2FXF-5JRW Improper path handling in kustomization files allows path traversal

The kustomize-controller enables the use of Kustomize’s functionality when applying Kubernetes declarative state onto a cluster. A malicious user can use built-in features and a specially crafted kustomization.yaml to expose sensitive data from the controller’s pod filesystem. In multi-tenancy...