GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, secrets-store-csi-driver-provider-gcp, kubewatch, bom, terraform-provider-sendgrid, atlantis, scorecard, dynamic-localpv-provisioner, rqlite, ollama, nri-prometheus, git-lfs, nodetaint, pulumi-language-yaml, terraform-provider-aws,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, secrets-store-csi-driver-provider-gcp, kubewatch, bom, terraform-provider-sendgrid, atlantis, scorecard, dynamic-localpv-provisioner, rqlite, ollama, nri-prometheus, git-lfs, nodetaint, pulumi-language-yaml, terraform-provider-aws,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: aactl, metrics-server-fips, kiam, nginx-mainline, grype, smarter-device-manager-fips, prometheus-adapter, frp, secrets-store-csi-driver, git-lfs, prometheus-postgres-exporter, atlantis, configmap-reload-fips, falcoctl-fips, flux-source-controller, kubevela,...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...