GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: migrate, whereabouts, rancher-security-scan-fips, dkron-fips, omnictl-multiarch, kube-arangodb-fips, knative-net-istio, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, cass-operator-fips, gitlab-kas, dex, external-dns-fips, cloud-provider-aws-fips,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: rekor, stern, kaf, caddy, q, hcloud, flux-kustomize-controller, configmap-reload, kind, jitsucom-bulker, redka, kyverno-policy-reporter-ui, pulumi-kubernetes-operator, kustomize, mockery, petname, dynamic-localpv-provisioner, gomplate, go-md2man, kubecolor,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, oauth2-proxy, cass-operator-fips, dex, dynamic-localpv-provisioner-fips, wave, karpenter, kustomize, kyverno-policy-reporter-kyverno-plugin, secrets-store-csi-driver-provider-gcp, go-bindata, vt-cli, hubble-ui-backend-fips, bank-vaults, hey,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: dagger, oauth2-proxy, cass-operator-fips, velero, velero-plugin-for-aws-fips, dex, dynamic-localpv-provisioner-fips, fluent-operator-fips, wave, amass, karpenter, kustomize, kyverno-policy-reporter-kyverno-plugin, secrets-store-csi-driver-provider-gcp, go-bindata,...

OSV-2021-1192 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::PoolBuffer::MakeUnique arrow::AllocateBuffer...

OSV-2021-1189 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37915 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::defaultmemorypool arrow::ipc::IpcReadOptions::Defaults...

PT-2021-27737

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state involves the arrow::DefaultBackend,...

PT-2021-27736

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state involves components such as arrow::DefaultBackend,...

arrow:arrow-ipc-file-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6674891504484352 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

arrow:arrow-ipc-stream-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4757582821064704 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

Exposed Endpoints

github.com/kubernetes/ingress-nginx is uses publicly exposed endpoints. The prometheus metrics and healthz of the Kubernetes defaultbackend can be accessed by a remote attacker using a port-forward request to access the publicly accessible metrics...