Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the kube-controller-manager when using the in-tree Portworx StorageClass. An attacker can access sensitive information from unprotected endpoints within the control plane's host network, including...

EUVD-2022-31996

Malicious code in bioql PyPI...

CVE-2022-27495: Missing Authentication for Critical Function

On all versions 1.3.x fixed in 1.4.0 NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2022-2553

Name of the Vulnerable Software and Affected Versions NGINX Service Mesh versions prior to 1.4.0 Description The issue is related to the lack of authentication for a critical function in NGINX Service Mesh, allowing a remote attacker to bypass the authentication process. This exposes the control...