515 matches found
CVE-2023-3893 Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...
CVE-2023-3893 Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...
GHSA-7FXM-F474-HF8W vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GHSA-Q78C-GWQW-JCMC vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips, kubeflow-pipelines, aws-efs-csi-driver...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...
CVE-2023-3676 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubeflow, volume-modifier-for-k8s-fips, metrics-server-fips, kubescape, kubernetes-csi-livenessprobe, kubevela, k3d, conftest-fips, kiam, smarter-device-manager-fips, aactl, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, scorecard, plutono-fips,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: dgraph, slsa-verifier, up, kubevela, kubescape, scorecard, buildkitd, kubeflow, terraform-provider-sendgrid, src, aactl, spark-operator, k3d, cortex...
CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13
CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13. A patched version of the package is available...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: oauth2-proxy, metrics-server-fips, kube-state-metrics, kubernetes-csi-livenessprobe, nodetaint, kubevela, k3d, flux-notification-controller, gke-gcloud-auth-plugin, ollama, smarter-device-manager-fips, bank-vaults, gitness, sigstore-scaffolding, tekton-chains,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: oauth2-proxy, nginx-stable, metrics-server-fips, kube-state-metrics, kubernetes-csi-livenessprobe, nodetaint, kubevela, k3d, flux-notification-controller, gke-gcloud-auth-plugin, ollama, smarter-device-manager-fips, conftest, gitness, sigstore-scaffolding,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: terraform-provider-aws, pulumi, wireguard-go, frp, kubevela, stakater-reloader, rqlite, gomplate, bom, kaf, metacontroller, nri-prometheus, kubescape, terraform-provider-azurerm, kots, kind, src, grpcurl, sigstore-scaffolding, kubernetes-csi-livenessprobe,...
CVE-2023-44487 vulnerabilities
Vulnerabilities for packages: terraform-provider-aws, pulumi, wireguard-go, frp, kubevela, stakater-reloader, rqlite, gomplate, bom, kaf, metacontroller, nri-prometheus, kubescape, terraform-provider-azurerm, kots, kind, src, grpcurl, sigstore-scaffolding, kubernetes-csi-livenessprobe,...
AZL-31305 CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
CVE-2023-44487 vulnerabilities
Vulnerabilities for packages: oauth2-proxy, nginx-stable, metrics-server-fips, kube-state-metrics, kubernetes-csi-livenessprobe, nodetaint, kubevela, k3d, flux-notification-controller, gke-gcloud-auth-plugin, ollama, smarter-device-manager-fips, conftest, gitness, sigstore-scaffolding,...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.13.3 security and bug fix update
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.13.3 on Red Hat Enterprise Linux 8 from Red Hat Container Registry. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS ba...
CVE-2023-43620
An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...
