GHSA-5PF6-2QWX-PXM2 vulnerabilities

Vulnerabilities for packages: falcosidekick, guac...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: kpt, newrelic-infrastructure-agent, kots, up, chartmuseum, flux, vexctl, zot, flux-helm-controller, dagger, tekton-chains, kargo, policy-controller, helm-operator-fips, aactl, gitsign, argo-workflows, flux-image-reflector-controller, k8sgpt, falcoctl-fips, loki,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: kpt, newrelic-infrastructure-agent, kots, up, chartmuseum, flux, vexctl, zot, flux-helm-controller, dagger, tekton-chains, kargo, policy-controller, helm-operator-fips, aactl, gitsign, argo-workflows, flux-image-reflector-controller, k8sgpt, falcoctl-fips, loki,...

GHSA-M3R6-H7WV-7XXV vulnerabilities

Vulnerabilities for packages: conftest, docker, kaniko, kubescape, guac, trivy, skaffold, scorecard, zot, buildkitd...

GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: skaffold, kubescape, guac, kaniko, docker, zot, scorecard, trivy, buildkitd, conftest, conftest-fips...

GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: conftest, docker, kaniko, kubescape, guac, trivy, skaffold, scorecard, zot, buildkitd...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: skaffold, kubescape, guac, kaniko, docker, zot, scorecard, trivy, buildkitd, conftest, conftest-fips...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: conftest, docker, kaniko, kubescape, guac, trivy, skaffold, scorecard, zot, buildkitd...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: conftest, docker, kaniko, kubescape, guac, trivy, skaffold, scorecard, zot, buildkitd...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: conftest, docker, kaniko, kubescape, guac, trivy, skaffold, scorecard, zot, buildkitd...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: skaffold, kubescape, guac, kaniko, docker, zot, scorecard, trivy, buildkitd, conftest, conftest-fips...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: skaffold, kubescape, guac, kaniko, docker, zot, scorecard, trivy, buildkitd, conftest, conftest-fips...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: conftest, docker, kaniko, kubescape, guac, trivy, skaffold, scorecard, zot, buildkitd...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: skaffold, kubescape, guac, kaniko, docker, zot, scorecard, trivy, buildkitd, conftest, conftest-fips...

GUAC 0.1 Beta: Google's Breakthrough Framework for Secure Software Supply Chains

Google on Wednesday announced the 0.1 Beta version of GUAC short for Graph for Understanding Artifact Composition for organizations to secure their software supply chains. To that end, the search giant is making available the open source framework as an API for developers to integrate their own...

GUAC - Aggregates Software Security Metadata Into A High Fidelity Graph Database

Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide and the "express interest" issue Graph for Understanding Artifact Composition GUAC aggregates software security metadata into a high fidelity graph database—normalizing entity identiti...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...

Google Launches GUAC Open Source Project to Secure Software Supply Chain

Google on Thursday announced that it's seeking contributors to a new open source initiative called Graph for Understanding Artifact Composition, also known as GUAC, as part of its ongoing efforts to beef up the software supply chain. "GUAC addresses a need created by the burgeoning efforts across...

guac-lock.com Cross Site Scripting vulnerability OBB-2362764

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

UBUNTU-CVE-2012-4415

Stack-based buffer overflow in the guacclientpluginopen function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long protocol name...