GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: helm, secrets-store-csi-driver-provider-gcp, rqlite, hey, kind, ko, terraform-provider-aws, gke-gcloud-auth-plugin, flux-helm-controller, pulumi-language-yaml, grype, scorecard, buildkitd, ollama, src, haproxy-ingress, newrelic-infrastructure-agent, memcached-exporte...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: metacontroller, stakater-reloader, gomplate, oauth2-proxy, secrets-store-csi-driver-provider-gcp, ko, prometheus-blackbox-exporter, sigstore-scaffolding, aactl, git-lfs, kubescape, terraform-provider-sendgrid, fuse-overlayfs-snapshotter, grpcurl, nats, helm, amass,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: helm, secrets-store-csi-driver-provider-gcp, rqlite, hey, kind, ko, terraform-provider-aws, gke-gcloud-auth-plugin, flux-helm-controller, pulumi-language-yaml, grype, scorecard, buildkitd, ollama, src, haproxy-ingress, newrelic-infrastructure-agent, memcached-exporte...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...