CVE-2023-28452 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-HFMW-7G3M-GJ6Q vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2022-2835 vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2022-2837 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-GV9J-4W24-Q7VX vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-H92Q-FGPP-QHRQ vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-CH7V-37XG-75PH vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2023-30464 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-H828-V5PV-33QX vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2023-28452 vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2023-30464 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-H92Q-FGPP-QHRQ vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-HFMW-7G3M-GJ6Q vulnerabilities

Vulnerabilities for packages: juicefs...

OS Command Injection

github.com/fluid-cloudnative/fluid is vulnerable to OS Command Injection. The vulnerability is due to insufficient input validation within the JuicefsRuntime, allowing an authenticated user with the authority to create or update the K8s CRD Dataset/JuicefsRuntime to execute arbitrary OS commands...

Fluid vulnerable to OS Command Injection for Fluid Users with JuicefsRuntime

Impact OS command injection vulnerability within the Fluid project's JuicefsRuntime can potentially allow an authenticated user, who has the authority to create or update the K8s CRD Dataset/JuicefsRuntime, to execute arbitrary OS commands within the juicefs related containers. This could lead to...

Fluid Security Vulnerability

Fluid is an open source Kubernetes native distributed dataset orchestrator and gas pedal from the Cloud Native Computing Foundation Foundation for data-intensive applications such as big data and AI applications. A security vulnerability exists in versions of Fluid prior to v0.9.3. An attacker...