GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: tailscale, knative-client, nri-discovery-kubernetes, kapp, bom, knative-operator, k3s, harbor-registry, rancher-fleet, rancher-helm, goreleaser, terraform-provider-time, aws-eks-pod-identity-agent, cadvisor, gptscript, sftpgo-plugin-eventsearch,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cri-tools, gitsign, nuclei, cluster-proportional-autoscaler, crossplane-provider-aws-rds, kubernetes-csi-driver-hostpath, prometheus-alertmanager, kubernetes-csi-external-provisioner, kaniko, cilium-cli, hubble-ui, mc, buildkitd, crossplane-provider-family-azure,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: cri-tools, k3s, kubescape, kubernetes, volume-modifier-for-k8s, docker-compose, kubernetes-csi-external-resizer, envoy-ratelimit, kubevela, metrics-server, temporal, kine, temporal-server, buildkitd...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: timestamp-authority-fips, smarter-device-manager-fips, bank-vaults-fips, kubeflow-fips, buildkitd, falco, kubernetes-csi-livenessprobe, prometheus-adapter-fips, prometheus-stackdriver-exporter, prometheus-blackbox-exporter, kubeflow, kubevela, kube-oidc-proxy,...

GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...