479 matches found
GHSA-3WHM-J4XM-RV8X vulnerabilities
Vulnerabilities for packages: policy-controller, ini-file, wazero, docker-cli, crossplane-provider-keycloak, crossplane-provider-azure-storage, kyverno-notation-aws, temporal-ui-server, oras, task, golangci-lint, cni-plugins, postgres-operator, direnv, multus-cni, flux, hugo, nri-rabbitmq,...
CVE-2025-22866 vulnerabilities
Vulnerabilities for packages: policy-controller, ini-file, wazero, docker-cli, crossplane-provider-keycloak, crossplane-provider-azure-storage, kyverno-notation-aws, temporal-ui-server, oras, task, golangci-lint, cni-plugins, postgres-operator, direnv, multus-cni, flux, hugo, nri-rabbitmq,...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: cosign, slsa-verifier, gh, cosign-fips...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: cosign, gh, slsa-verifier...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: cosign, slsa-verifier, gh, cosign-fips...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: cosign, gh, slsa-verifier...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: kubescape, k8sgpt, kots, spire-server-fips, conftest-fips, policy-controller-fips, spire-server, zarf, conftest, snyk-cli, cosign-fips, zot, cosign, tfsec, policy-controller, opa...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: opa, conftest, policy-controller, zarf, k8sgpt, kots, cosign, kubescape, snyk-cli, zot, spire-server, tfsec...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: kubescape, k8sgpt, kots, spire-server-fips, conftest-fips, policy-controller-fips, spire-server, zarf, conftest, snyk-cli, cosign-fips, zot, cosign, tfsec, policy-controller, opa...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: opa, conftest, policy-controller, zarf, k8sgpt, kots, cosign, kubescape, snyk-cli, zot, spire-server, tfsec...
openSUSE Security Advisory (SUSE-SU-2024:1486-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
cosign: Malicious attachments can cause system-wide denial of service
A flaw was found in the Cosign package where a malicious attachment may trigger uncontrolled resource consumption by allocating too much memory. This flaw allows an attacker to craft a malicious attachment, resulting in a denial of service, possibly impacting other applications running on the sam...
cosign: Malicious artifects can cause machine-wide denial of service
A flaw was found in the Cosign package where maliciously crafted software artifacts can trigger uncontrolled resource consumption by allocating too much memory and starving out the system. A successful attack may result in a denial of service of the machine running Cosign, impacting availability...
SUSE-SU-2024:1486-2 Security update for cosign
This update for cosign fixes the following issues: - CVE-2024-29902: Fixed denial of service on host machine via remote image with a malicious attachments bsc1222835 - CVE-2024-29903: Fixed denial of service on host machine via malicious software artifacts bsc1222837 Other fixes: - Updated to 2.2...
OPENSUSE-SU-2024:13402-1 cosign-2.2.1-1.1 on GA media
These are all security issues fixed in the cosign-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12331-1 cosign-1.12.0-1.1 on GA media
These are all security issues fixed in the cosign-1.12.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13863-1 cosign-2.2.4-1.1 on GA media
These are all security issues fixed in the cosign-2.2.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12240-1 cosign-1.10.1-1.1 on GA media
These are all security issues fixed in the cosign-1.10.1-1.1 package on the GA media of openSUSE Tumbleweed...