Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via httprequester.go and httpdownloader.go‎. An attacker can access internal network resources and exfiltrate sensitive data by crafting malicious promotion templates or Promotion resources that trigger...

CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: k3s, kine, grafana-alloy, argo-cd, argo-rollouts, opentelemetry-collector, nats, verticadb-operator, kargo, coredns, kserve, vale, amazon-cloudwatch-agent, k8sgpt, k8sgateway, splunk-otel-collector, opentelemetry-collector-contrib, datadog-agent, aws-otel-collector,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: k3s, kine, grafana-alloy, argo-cd, argo-rollouts, opentelemetry-collector, nats, verticadb-operator, kargo, coredns, kserve, vale, amazon-cloudwatch-agent, k8sgpt, k8sgateway, splunk-otel-collector, opentelemetry-collector-contrib, datadog-agent, aws-otel-collector,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, elastic-agent-fips, nats-fips, k8sgateway-fips, verticadb-operator, amazon-cloudwatch-agent-fips, k3s, kargo, vale, coredns-fips, k8sgpt, opentelemetry-collector-contrib, coredns, splunk-otel-collector, nrdot-collector-k8s, amazon-cloudwatch-agen...