GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: fleet-server, cilium, cluster-api-azure-controller-fips, logstash-exporter-fips, knative-eventing, vault-fips, kube-conformance, k6-operator, mcp-grafana, k6-fips, aws-ebs-csi-driver, deck-fips, linkerd2-cni-plugin, nri-mongodb,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: local-path-provisioner, wire-go, litestream, crossplane-provider-azure, aactl, wgcf, cosign, rclone, dynamic-localpv-provisioner, nri-prometheus, gke-gcloud-auth-plugin, glab, newrelic-prometheus-configurator, pombump, secrets-store-csi-driver-provider-gcp,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter-fips, argo-workflows, logstash-exporter-fips, terraform-docs, harbor-scanner-trivy, aws-ebs-csi-driver, go-licenses, cri-tools, step, kubernetes-dashboard-metrics-scraper, kubernetes-dashboard-fips, prometheus-alertmanager,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter-fips, argo-workflows, logstash-exporter-fips, terraform-docs, harbor-scanner-trivy, age, aws-ebs-csi-driver, nri-mongodb, go-licenses, cri-tools, request-1279, step, nri-jmx, step-issuer-fips, kaniko, task, prometheus-node-exporter,...

OSV-2021-1192 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::PoolBuffer::MakeUnique arrow::AllocateBuffer...

OSV-2021-1189 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37915 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::defaultmemorypool arrow::ipc::IpcReadOptions::Defaults...

Exposed Endpoints

github.com/kubernetes/ingress-nginx is uses publicly exposed endpoints. The prometheus metrics and healthz of the Kubernetes defaultbackend can be accessed by a remote attacker using a port-forward request to access the publicly accessible metrics...