156 matches found
CVE-2023-35165 AWS CDK EKS overly permissive trust policies
AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...
GHSA-RX28-R23P-2QC3 AWS CDK EKS overly permissive trust policies
If you are using the eks.Cluster or eks.FargateCluster construct we need you to take action. Other users are not affected and can stop reading. Impact The AWS Cloud Development Kit CDK allows for the definition of Amazon Elastic Container Service for Kubernetes EKS clusters. eks.Cluster and...
AWS CDK EKS overly permissive trust policies
If you are using the eks.Cluster or eks.FargateCluster construct we need you to take action. Other users are not affected and can stop reading. Impact The AWS Cloud Development Kit CDK allows for the definition of Amazon Elastic Container Service for Kubernetes EKS clusters. eks.Cluster and...
PT-2023-25176 · Amazon · @Aws-Cdk/Aws-Eks +2
Name of the Vulnerable Software and Affected Versions: aws-cdk-lib versions 2.0.0 through 2.80.0 @aws-cdk/aws-eks versions 1.57.0 through 1.202.0 Description: The issue concerns the AWS Cloud Development Kit AWS CDK, an open-source software development framework. In the affected packages,...
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: go, kubeflow-fips, terraform-provider-sendgrid, kubeflow-katib, terraform-provider-sendgrid-fips, kubeflow, gke-gcloud-auth-plugin, kube-state-metrics, dynamic-localpv-provisioner, grpcurl, hey, restic, wireguard-go, dynamic-localpv-provisioner-fips, k3d...
GHSA-VVPX-J8F3-3W6H vulnerabilities
Vulnerabilities for packages: go, kubeflow-fips, terraform-provider-sendgrid, kubeflow-katib, terraform-provider-sendgrid-fips, kubeflow, gke-gcloud-auth-plugin, kube-state-metrics, dynamic-localpv-provisioner, grpcurl, hey, restic, wireguard-go, dynamic-localpv-provisioner-fips, k3d...
GHSA-GWC9-M7RH-J2WW vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, kubeflow-fips, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, k3d...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, kubeflow-fips, terraform-provider-sendgrid, kubeflow-katib, kubeflow, kube-state-metrics, dynamic-localpv-provisioner, grpcurl, hey, wireguard-go, dynamic-localpv-provisioner-fips, k3d...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, kubeflow-fips, terraform-provider-sendgrid, kubeflow-katib, kubeflow, kube-state-metrics, dynamic-localpv-provisioner, grpcurl, hey, wireguard-go, dynamic-localpv-provisioner-fips, k3d...
CVE-2021-43565 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, kubeflow-fips, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, k3d...
Fedora: Security Advisory for golang-sigs-k8s-aws-iam-authenticator (FEDORA-2022-5038c3236c)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: golang-sigs-k8s-aws-iam-authenticator-0.5.2-8.fc36
A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project receives contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS Engineers...
GHSA-P782-XGP4-8HR8 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, terraform-provider-sendgrid, kubeflow, ctop, dynamic-localpv-provisioner, grpcurl, kind, dynamic-localpv-provisioner-fips, k3d...
Malicious code in eks-auto-create-idp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe5220ea6202484d070bbe62ba66ccb40f7d0b230bcfb2a4208d4aec4877ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2682 Malicious code in eks-auto-create-idp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe5220ea6202484d070bbe62ba66ccb40f7d0b230bcfb2a4208d4aec4877ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in callrail_eks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a04c2e632af57414931941b9d17e0edb9dc7883a968f5c96670cff845f32638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Amazon EKS vs Azure Kubernetes Service
Managed Kubernetes services help organizations deploy, configure, and manage Kubernetes clusters. This article compares two of the biggest service providers: Amazon EKS and Azure Kubernetes Services...
GHSA-F4W6-3RH6-6Q4Q vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-provisioner...