GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: spark-operator, flux-kustomize-controller, secrets-store-csi-driver, kubescape, dex, mc, bom, frp, prometheus-adapter, scorecard, terraform, dynamic-localpv-provisioner, sigstore-scaffolding, nats, newrelic-infrastructure-agent, kubernetes-csi-livenessprobe, gobuster...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: spark-operator, flux-kustomize-controller, secrets-store-csi-driver, kubescape, dex, mc, bom, frp, prometheus-adapter, scorecard, terraform, dynamic-localpv-provisioner, sigstore-scaffolding, nats, newrelic-infrastructure-agent, kubernetes-csi-livenessprobe, gobuster...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: atlantis-fips, pulumi, grpcurl, secrets-store-csi-driver-provider-gcp, memcached-exporter, conftest, nodetaint, prometheus-blackbox-exporter, cue, nginx-stable, aws-efs-csi-driver-fips, smarter-device-manager-fips, metrics-server, kiam, kubeflow-fips, git-lfs,...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...