CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: certificate-transparency, nvidia-container-toolkit, neuvector-scanner, gitleaks, ferretdb, k8sgpt, hubble-ui-backend-fips, kubecolor, redka, go-md2man, karpenter, dockerize-fips, grafana-agent-operator, cortex, flux-notification-controller,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: step, falcoctl, slsa-verifier, flux-kustomize-controller, rook, gomplate, sops, step-ca, minio, nerdctl, melange, zarf, spire-server, k3s, guac, sigstore-scaffolding, dex, dgraph, flux-source-controller, cosign, temporal-ui-server, policy-controller,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, falcoctl-fips, boring-registry, spire-server-fips, external-secrets-fips, minio, spire-server, minio-fips, mc, falcoctl, mc-fips...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, falcoctl-fips, boring-registry, spire-server-fips, external-secrets-fips, minio, spire-server, minio-fips, mc, falcoctl, mc-fips...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: mc, spire-server, falcoctl, kubescape, vexctl, tekton-chains, boring-registry, minio, gitsign...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, tekton-chains, gitsign, cosign-fips, kubescape, vexctl, falcoctl...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, spark-operator, metrics-server-fips, slsa-verifier, prometheus-stackdriver-exporter, cortex, aactl, kiam, buildkitd, smarter-device-manager-fips, up, scorecard, kubernetes-csi-livenessprobe-fips, src, prometheus-blackbox-exporter, dgraph,...

SUSE CVE-2019-13509

In Docker CE and EE before 18.09.8 as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10, Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. I...

In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10) Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.

...

DEBIAN-CVE-2019-13509

In Docker CE and EE before 18.09.8 as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10, Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. I...