CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: croc, kubecolor, secrets-store-csi-driver-provider-gcp, docker-credential-acr-env, chartmuseum, helm-docs, kube-vip, stern, etcd, wolfictl, minify, rclone, fluent-bit-plugin-loki, prometheus-redis-exporter, flux-notification-controller, kafkaexporter, kargo,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, chartmuseum, etcd, rclone, prometheus-redis-exporter, flux-notification-controller, kargo, terraform-provider-aws, cloudflared, php-fpmexporter, temporal, helm-operator-fips, eksctl, prometheus-mysqld-exporter,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow, scorecard, src, up, dgraph, metrics-server-fips, falcoctl-fips, volume-modifier-for-k8s-fips, vault-csi-provider, dynamic-localpv-provisioner-fips, prometheus-stackdriver-exporter, smarter-device-manager-fips, bank-vaults-fips, conftest-fips, plutono-fips,...

GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, thanos-operator-fips, thanos-operator, dynamic-localpv-provisioner...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, thanos-operator-fips, thanos-operator, dynamic-localpv-provisioner...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...