CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, newrelic-infra-operator, prometheus-bind-exporter, bank-vaults, mods, cloudflared, cilium-fips, kubernetes-ingress-defaultbackend, addon-resizer-fips, crossplane-provider-gcp, fulcio-fips, docker-credential-gcr, policy-controller, kpt, cue, go,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: ko, sigstore-scaffolding, spire-server, dgraph, gitsign, temporal, apko, step-ca, flux-source-controller, kube-rbac-proxy, tekton-chains, kots, temporal-ui-server, melange, bank-vaults, guac, slsa-verifier, zarf, argo-workflows, zot, frp, cosign, rekor, minio,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: mc, spire-server-fips, falcoctl, falcoctl-fips, minio-fips, spire-server, mc-fips, boring-registry-fips, external-secrets-fips, minio, boring-registry...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: mc, spire-server-fips, falcoctl, falcoctl-fips, minio-fips, spire-server, mc-fips, boring-registry-fips, external-secrets-fips, minio, boring-registry...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: minio, falcoctl, vexctl, tekton-chains, spire-server, boring-registry, gitsign, kubescape, mc...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: cosign-fips, gitsign, falcoctl, falcoctl-fips, kubescape, vexctl, tekton-chains...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, falcoctl-fips, scorecard, src, terraform-provider-sendgrid, plutono-fips, bank-vaults-fips, slsa-verifier, metrics-server-fips, vault-csi-provider, kubevela, terraform-provider-sendgrid-fips, kubernetes-csi-livenessprobe, timestamp-authority-fips, kubeflow-fips,...

SUSE CVE-2019-13509

In Docker CE and EE before 18.09.8 as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10, Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. I...

In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10) Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.

...

DEBIAN-CVE-2019-13509

In Docker CE and EE before 18.09.8 as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10, Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. I...