GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, k3d, aactl, newrelic-infrastructure-agent, ip-masq-agent, gitness, kaf, mc, grpcurl, nghttp2, kubewatch, kubevela, pulumi, terraform, fuse-overlayfs-snapshotter, flux-notification-controller, gomplate, grype, hugo, git-lfs, cortex,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, k3d, aactl, newrelic-infrastructure-agent, ip-masq-agent, gitness, kaf, mc, grpcurl, nghttp2, kubewatch, kubevela, pulumi, terraform, fuse-overlayfs-snapshotter, flux-notification-controller, gomplate, grype, hugo, git-lfs, cortex,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: skaffold, dynamic-localpv-provisioner, ip-masq-agent, secrets-store-csi-driver-provider-gcp, nri-prometheus, terraform-provider-aws, metacontroller, certificate-transparency, cosign, kubeflow, atlantis-fips, aws-efs-csi-driver-fips, git-lfs, falcoctl-fips, aactl,...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...