Wrong estimation of acceptable risk of the protocol losses

Lines of code Vulnerability details Impact The protocol losses in case compromised MINTERS or REDEEMERS can be higher than expected due to the GATEKEEPER suppression. Attacker can frontrun the GATEKEEPER and fill block limit with own transactions while it is profitable. Average losses can be more...

Compromised minter can change route to misdirect user funds

Lines of code Vulnerability details Impact The current security assumption revolves around the compromise of a minter, wherein they mint 200k USDe tokens for themselves and subsequently redeem them within the contract. Under this assumption, as long as the gatekeeper key remains secure, the minte...

Minter can censor GATEKEEPER and mint uncollateralized for a prolonged period of time

Lines of code Vulnerability details Impact Ethena explicitly mentions their protection against a compromised minter, the mentioned maximum loss is $100.000. The protection against a compromised minter rests on the GATEKEEPER role which is a system running on AWS set to remove the minter if mints...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: buildkitd, k3d, kubevela, kubeflow, aactl, dgraph, prometheus-blackbox-exporter, cortex, spark-operator, up, slsa-verifier, terraform-provider-sendgrid, src, kubescape, scorecard...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: smarter-device-manager-fips, prometheus-blackbox-exporter, kubernetes-csi-livenessprobe-fips, bank-vaults-fips, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, kiam, kubescape, falcoctl-fips, k3d, prometheus-adapter-fips, prometheus-stackdriver-exporte...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, rancher-webhook, kubernetes-fips, caddy, kubevela, up, buildkitd, prometheus-adapter, kubernetes, metrics-server-fips, rancher-webhook-fips, k3s...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, buildkitd, kubevela, caddy, k3s, kubernetes, up...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, rancher-webhook, kubernetes-fips, caddy, kubevela, up, buildkitd, prometheus-adapter, kubernetes, metrics-server-fips, rancher-webhook-fips, k3s...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: nodetaint, prometheus-adapter, flux-notification-controller, vertical-pod-autoscaler, kpt, k8sgpt-operator, kube-logging-operator, k3d, prometheus-pushgateway-fips, trust-manager, prometheus-adapter-fips, prometheus-stackdriver-exporter, metrics-server,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, atlantis, kubevela, kpt, gke-gcloud-auth-plugin, kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, gobuster, hugo, grype, aactl, flux-kustomize-controller, mc, secrets-store-csi-driver-provider-gcp, helm, ollama, pulumi-language-java, k3d,...

CVE-2023-41067

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-41067

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40450

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40450

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

Design/Logic Flaw

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40450

The CVE-2023-40450 issue is described as a Gatekeeper bypass in macOS, fixed in macOS Sonoma 14. The Core detail: an app may bypass Gatekeeper checks, with Apple documenting a patch via “improved checks.” Connected sources corroborate this fix and note macOS Sonoma 14 as the affected/patched rele...

CVE-2023-40450

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40450

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-41067

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...