GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: syft, trivy, conftest-fips, docker-compose, crossplane, loki, aactl, tkn, up, spire-server-fips, kubescape, kaniko, grype, dagger, cadvisor, ctop, melange, zot, ko, cadvisor-fips, wolfictl, prometheus, kargo, cilium-cli, conftest, spire-server, buf, buildkitd...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, crossplane-provider-azure, aactl, tigera-operator-fips, cosign, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver-provider-azure, grpc-health-probe, melange, cri-tools, crossplane-provider-aws-firehose,...

GHSA-M3R6-H7WV-7XXV vulnerabilities

Vulnerabilities for packages: trivy, buildkitd, kaniko, conftest, scorecard, skaffold, docker, guac, zot, kubescape...

GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: kubescape, conftest-fips, trivy, kaniko, docker, guac, conftest, scorecard, skaffold, zot, buildkitd...

GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: trivy, buildkitd, kaniko, conftest, scorecard, skaffold, docker, guac, zot, kubescape...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: trivy, buildkitd, kaniko, conftest, scorecard, skaffold, docker, guac, zot, kubescape...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: kubescape, conftest-fips, trivy, kaniko, docker, guac, conftest, scorecard, skaffold, zot, buildkitd...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: kubescape, conftest-fips, trivy, kaniko, docker, guac, conftest, scorecard, skaffold, zot, buildkitd...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: trivy, buildkitd, kaniko, conftest, scorecard, skaffold, docker, guac, zot, kubescape...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: kubescape, conftest-fips, trivy, kaniko, docker, guac, conftest, scorecard, skaffold, zot, buildkitd...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: trivy, buildkitd, kaniko, conftest, scorecard, skaffold, docker, guac, zot, kubescape...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: kubescape, conftest-fips, trivy, kaniko, docker, guac, conftest, scorecard, skaffold, zot, buildkitd...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: trivy, buildkitd, kaniko, conftest, scorecard, skaffold, docker, guac, zot, kubescape...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: smarter-device-manager-fips, vault-csi-provider, conftest-fips, prometheus-adapter-fips, aactl, kiam, prometheus-stackdriver-exporter, metrics-server-fips, up, k3d, timestamp-authority-fips, kubescape, kubeflow, aws-efs-csi-driver-fips, src, cortex, spark-operator,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: k3d, buildkitd, kubeflow, src, slsa-verifier, dgraph, terraform-provider-sendgrid, kubevela, scorecard, up, cortex, kubescape, spark-operator, aactl...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: minio, terraform-provider-sendgrid, kots, dex, pulumi, amass, kubevela, pulumi-language-yaml, kpt, dgraph, kubeflow-katib, stakater-reloader, cue, secrets-store-csi-driver-provider-gcp, pulumi-kubernetes-operator, fuse-overlayfs-snapshotter, mc, nghttp2,...

Improper path handling in kustomization files allows path traversal

The kustomize-controller enables the use of Kustomize’s functionality when applying Kubernetes declarative state onto a cluster. A malicious user can use built-in features and a specially crafted kustomization.yaml to expose sensitive data from the controller’s pod filesystem. In multi-tenancy...

GHSA-J77R-2FXF-5JRW Improper path handling in kustomization files allows path traversal

The kustomize-controller enables the use of Kustomize’s functionality when applying Kubernetes declarative state onto a cluster. A malicious user can use built-in features and a specially crafted kustomization.yaml to expose sensitive data from the controller’s pod filesystem. In multi-tenancy...