GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: spire-controller-manager, sftpgo-plugin-kms, kustomize, fscrypt, gostatsd, k8s-device-plugin, minify, helm-docs, kuberlr, oauth2-proxy, kuberay-operator, podman, flannel, terraform, nodetaint, smarter-device-manager, aws-signer-notation-plugin, nri-prometheus,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: vexctl, flux-image-automation-controller, k8ssandra-operator-fips, supercronic, atlantis-fips, cue, hubble-ui, influx, wire-go, prometheus-pushgateway, q, up, eksctl, kubernetes-csi-livenessprobe, mage, prometheus-mongodb-exporter, docker-credential-ecr-login, pombum...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: vexctl, kapp-controller, osv-scanner, fluent-operator, tkn-fips, x509-certificate-exporter-fips, cloud-provider-azure-fips, velero-plugin-for-aws, mage, neuvector, prometheus-mongodb-exporter, docker-credential-ecr-login, paranoia, shfmt, request-1279-14,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, local-static-provisioner, vcluster, argocd-image-updater, spark-operator, kubernetes-csi-driver-nfs, emissary, rancher-fleet, kapp, rancher-webhook, argo-rollouts, ip-masq-agent, kubernetes,...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, envoy-ratelimit, sftpgo-plugin-kms, kustomize, cluster-proportional-autoscaler, fscrypt, gostatsd, k8s-device-plugin, minify, helm-docs, rancher-webhook, kuberlr, oauth2-proxy, kuberay-operator, podman, kubernetes-dashboard, flannel,...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: local-static-provisioner-fips, ip-masq-agent, aws-efs-csi-driver, nodetaint, rancher-webhook, rancher-webhook-fips, kubeflow-pipelines, local-static-provisioner, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache, k8s-device-plugin, argocd-image-updater,...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater, argocd-image-updater-fips, aws-efs-csi-driver-fips...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater, argocd-image-updater-fips, aws-efs-csi-driver-fips...

CVE-2022-45157

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

CVE-2022-45157

CVE-2022-45157 affects Rancher where vSphere CPI/CSI credentials used to deploy clusters are stored in plaintext within Rancher. This leads to HIGH impact on confidentiality and integrity for vSphere environments (passwords stored insecurely in a Rancher object). CVSS data in the initial document...

CVE-2022-45157 Exposure of vSphere's CPI and CSI credentials in Rancher

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

CVE-2022-45157 Exposure of vSphere's CPI and CSI credentials in Rancher

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission

Summary Nomad Community and Nomad Enterprise “Nomad” volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and...

Hashicorp Nomad Incorrect Authorization vulnerability

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

UBUNTU-CVE-2024-10975

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

CVE-2024-10975 Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

CVE-2024-10975

CVE-2024-10975 affects HashiCorp Nomad: Nomad Community Edition prior to 1.9.2 and Nomad Enterprise prior to 1.9.2, 1.8.7, or 1.7.15. The issue allows arbitrary cross-namespace volume creation via unauthorized CSI writes, with CVSS v3.1 base score 7.7 (HIGH): network attack vector, requiring low ...