Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via httprequester.go and httpdownloader.go‎. An attacker can access internal network resources and exfiltrate sensitive data by crafting malicious promotion templates or Promotion resources that trigger...

CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: coredns, vale, jaeger, argo-workflows, splunk-otel-collector, nats, amazon-cloudwatch-agent, k3s, k8sgpt, kserve, grafana-alloy, argo-rollouts, aws-otel-collector, kine, kubeflow-pipelines, datadog-agent, verticadb-operator, keda, tempo, kargo, argo-cd, k8sgateway,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: coredns, vale, jaeger, argo-workflows, splunk-otel-collector, nats, amazon-cloudwatch-agent, k3s, k8sgpt, kserve, grafana-alloy, argo-rollouts, aws-otel-collector, kine, kubeflow-pipelines, datadog-agent, verticadb-operator, keda, tempo, kargo, argo-cd, k8sgateway,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: kine, tempo-fips, datadog-agent, argo-rollouts, tempo, kargo, amazon-cloudwatch-agent-fips, splunk-otel-collector-fips, amazon-cloudwatch-agent, grafana-alloy-fips, verticadb-operator, aws-otel-collector, argo-cd-fips, argo-workflows, k3s, kserve, nrdot-collector-k8s...