62 matches found
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: flux-helm-controller, skaffold, kots, opa, nerdctl, wolfictl, spegel, docker-compose, dagger, kubescape, melange, envoy-gateway, zot, opa-envoy, buildkitd, chartmuseum, k8sgpt, osv-scanner, docker-cli-buildx, neuvector-scanner, helm, kargo, syft, helm-operator, kanik...
CVE-2022-36049
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
BIT-HELM-2022-36049 Flux2 Helm Controller denial of service
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: eksctl, cilium-cli, kubevela, flux-source-controller, trivy, helm-operator, chartmuseum, helm-push, kots, k8sgpt, zot, k9s, kubescape, up, zarf, flux-helm-controller...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: zot, kubevela, flux-helm-controller, cilium-cli, zarf, chartmuseum, k8sgpt, kots, flux-source-controller, helm-push, k9s, trivy, up, eksctl, helm-operator, kubescape...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: eksctl, cilium-cli, kubevela, flux-source-controller, trivy, helm-operator, chartmuseum, helm-push, kots, k8sgpt, zot, k9s, kubescape, up, zarf, flux-helm-controller...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: policy-controller, ko-fips, tekton-chains, kargo, cri-tools, k8sgpt, cosign-fips, k3d, argo-workflows, zot, up, slsa-verifier, newrelic-infrastructure-agent, argo-workflows-fips, nerdctl, cadvisor, k3s, trivy, ctop, falcoctl, kubevela, pulumi, aactl, helm-operator,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: policy-controller, ko-fips, tekton-chains, kargo, cri-tools, k8sgpt, cosign-fips, k3d, argo-workflows, zot, up, slsa-verifier, newrelic-infrastructure-agent, argo-workflows-fips, nerdctl, cadvisor, k3s, trivy, ctop, falcoctl, kubevela, pulumi, aactl, helm-operator,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kube-oidc-proxy, metrics-server-fips, terraform-provider-sendgrid, bank-vaults-fips, cortex, k3d, dynamic-localpv-provisioner-fips, up, slsa-verifier, conftest-fips, kubevela, src, kiam, aactl, timestamp-authority-fips, kubeflow-fips, vault-csi-provider, kubeflow,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubevela, terraform-provider-sendgrid, kubeflow, spark-operator, k3d, buildkitd, scorecard, prometheus-blackbox-exporter, slsa-verifier, up, src, aactl, kubescape, dgraph, cortex...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: stakater-reloader, skaffold, oauth2-proxy, metacontroller, kubeflow, grpcurl, weaviate, cue, kaf, gke-gcloud-auth-plugin, sigstore-scaffolding, aws-efs-csi-driver, bom, gobuster, cortex, conftest, fuse-overlayfs-snapshotter, kubeflow-katib, memcached-exporter,...
CVE-2023-2253 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, aactl, kpt, bom, kubernetes-dashboard...
GHSA-HQXW-F8MX-CPMW vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, aactl, kpt, bom, kubernetes-dashboard...
CVE-2023-28841 vulnerabilities
Vulnerabilities for packages: ctop, ko, helm, apko, bom, up, melange...
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: ctop, ko, helm, apko, bom, up, melange...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: ctop, ko, helm, apko, bom, up, melange...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: ctop, ko, helm, apko, bom, up, melange...
CBL Mariner 2.0 Security Update: helm (CVE-2022-36049)
The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36049 advisory. - Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-...