240 matches found
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, prometheus-operator, gcsfuse, eksctl, kube-rbac-proxy-fips, ollama, kots, crossplane-provider-aws-firehose, kiam, runc, crossplane-provider-aws-s3, kubernetes-dashboard-metrics-scraper-fips, dynamic-localpv-provisioner-fips,...
CVE-2021-44716 affecting package csi-driver-lvm for versions less than 0.4.1-15
CVE-2021-44716 affecting package csi-driver-lvm for versions less than 0.4.1-15. A patched version of the package is available...
CVE-2023-45285 vulnerabilities
Vulnerabilities for packages: cni-plugins-fips, protoc-gen-go-grpc, go-md2man, configmap-reload-fips, grpcurl, go-licenses, flannel-cni-plugin, kind, prometheus-beat-exporter-fips, hubble-ui, bank-vaults-fips, cni-plugins, k3d, sbom-scorecard, prometheus-adapter-fips, dgraph, configmap-reload,...
GHSA-HQ6Q-C2X6-HMCH vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, aws-ebs-csi-driver, spark-operator, ip-masq-agent, nodetaint, aws-efs-csi-driver, aws-efs-csi-driver-fips, prometheus-adapter...
GHSA-HQ6Q-C2X6-HMCH vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, prometheus-adapter, nodetaint, ip-masq-agent, spark-operator, aws-efs-csi-driver...
CVE-2023-5528 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, aws-ebs-csi-driver, spark-operator, ip-masq-agent, nodetaint, aws-efs-csi-driver, aws-efs-csi-driver-fips, prometheus-adapter...
CVE-2023-47108 vulnerabilities
Vulnerabilities for packages: volume-modifier-for-k8s, cri-tools, metrics-server, envoy-ratelimit, temporal-server, kubevela, kine, kubernetes-csi-external-resizer, kubescape, k3s, temporal, buildkitd, kubernetes, docker-compose...
Important: Red Hat Bug Fix Advisory: LVMS 4.14.z Bug Fix and Enhancement update
Updated container images that fix multiple bugs are now available for LVMS 4.14.z. Logical volume manager storage LVMS uses the TopoLVM CSI driver to dynamically provision local storage on single node OpenShift clusters. Logical volume manager storage creates thin-provisioned volumes using the...
GHSA-7FXM-F474-HF8W vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, aws-efs-csi-driver-fips...
CVE-2023-3676 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: up, kubeflow-fips, spark-operator, bank-vaults-fips, terraform-provider-sendgrid, k3d, kubevela, kubeflow, dgraph, prometheus-adapter-fips, scorecard, conftest-fips, kubernetes-csi-livenessprobe-fips, aactl, vault-csi-provider, kubescape, kubernetes-csi-livenessprobe...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: src, cortex, k3d, up, dgraph, slsa-verifier, kubevela, kubeflow, kubescape, spark-operator, terraform-provider-sendgrid, buildkitd, scorecard, aactl...
CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13
CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13. A patched version of the package is available...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: prometheus-operator, prometheus-postgres-exporter, terraform, prometheus-adapter-fips, metrics-server, bom, aws-load-balancer-controller, aactl, atlantis, flux, ollama, wireguard-go, secrets-store-csi-driver, atlantis-fips, kots, nfs-subdir-external-provisioner,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: src, flux-kustomize-controller, grype, flux-source-controller, kubewatch, scorecard, ip-masq-agent, helm, kubernetes-csi-livenessprobe, ollama, frp, rqlite, memcached-exporter, buildkitd, cosign, k3d, metrics-server, certificate-transparency,...
AZL-31305 CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...