GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: k3d, spark-operator, dgraph, scorecard, kubescape, cortex, kubevela, src, slsa-verifier, terraform-provider-sendgrid, buildkitd, aactl, up, kubeflow...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, runc, kube-state-metrics-fips, crossplane-provider-aws, kubeflow, k8sgpt-operator, mc, metrics-server-fips, nfs-subdir-external-provisioner-fips, vault-k8s, grpcurl, smarter-device-manager-fips, k3d, prometheus-pushgateway, trillian,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: timestamp-authority-fips, kubeflow, mc, metrics-server-fips, nfs-subdir-external-provisioner-fips, grpcurl, smarter-device-manager-fips, k3d, nri-prometheus, cue, dex, terraform-provider-sendgrid, kubescape, dynamic-localpv-provisioner, cosign, flux-helm-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: metacontroller, stakater-reloader, rqlite, pulumi, certificate-transparency, newrelic-infrastructure-agent, kubeflow-katib, memcached-exporter, hey, pulumi-language-yaml, dgraph, flux-helm-controller, src, gomplate, cue, frp, pulumi-language-java, kots, amass,...

CVE-2022-46174

A potential race condition issue exists within the Amazon EFS mount helper in efs-utils and aws-efs-csi-driver when using TLS to mount file systems. The mount helper allocates a local port for stunnel to receive NFS connections prior to applying the TLS tunnel. In affected versions, concurrent...