GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: amass, cosign, conftest, stakater-reloader, kubescape, haproxy-ingress, nodetaint, secrets-store-csi-driver, nginx-mainline, helm, memcached-exporter, terraform-provider-aws, flux-helm-controller, skaffold, envoy-ratelimit, sigstore-scaffolding, ollama, atlantis, mc,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: amass, cosign, conftest, stakater-reloader, kubescape, haproxy-ingress, nodetaint, secrets-store-csi-driver, nginx-mainline, helm, memcached-exporter, terraform-provider-aws, flux-helm-controller, skaffold, envoy-ratelimit, sigstore-scaffolding, ollama, atlantis, mc,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: buildkitd, kubeflow-katib, cue, terraform-provider-aws, minio, hugo, flux-source-controller, kind, grype, newrelic-infrastructure-agent, node-problem-detector, dgraph, gomplate, terraform-provider-sendgrid-fips, git-lfs, helm, src, kubeflow, kubeflow-fips, mc, hey,...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...