GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: grafana-operator, argo-rollouts, skopeo, sftpgo-plugin-auth, pvc-autoresizer, vault-env, opentofu, whereabouts, pdfcpu, dgraph, vault-k8s, lazydocker, dkron, rancher-agent, github-mcp-server, task, kots, rootlesskit, docker-machine-driver-linode,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: hugo-extended, kubernetes-csi-external-provisioner, src, cortex, grafana-operator, metrics-server, pulumi, fuse-overlayfs-snapshotter, helm, ollama, kwok, skopeo, helm-operator, minio, docker, crossplane-provider-aws-sqs, ip-masq-agent, dgraph,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubernetes, buildkitd, metrics-server, docker-compose, cri-tools, kubevela, temporal, temporal-server, kubernetes-csi-external-resizer, volume-modifier-for-k8s, kubescape, k3s, kine, envoy-ratelimit...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, terraform-provider-sendgrid-fips, bank-vaults-fips, slsa-verifier, prometheus-adapter-fips, aws-efs-csi-driver-fips, falcoctl-fips, kubeflow-fips, kubescape, kubevela, conftest-fips, prometheus-stackdriver-exporter, metrics-server-fips, k3d,...

GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...