Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via httprequester.go and httpdownloader.go‎. An attacker can access internal network resources and exfiltrate sensitive data by crafting malicious promotion templates or Promotion resources that trigger...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, splunk-otel-collector, verticadb-operator, grafana-alloy, opentelemetry-collector, k8sgpt, k8sgateway, k3s, kserve, amazon-cloudwatch-agent, argo-workflows, nats, argo-cd, opentelemetry-collector-contrib, aws-otel-collector, kargo, kine, jaeger,...

CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, splunk-otel-collector, verticadb-operator, grafana-alloy, opentelemetry-collector, k8sgpt, k8sgateway, k3s, kserve, amazon-cloudwatch-agent, argo-workflows, nats, argo-cd, opentelemetry-collector-contrib, aws-otel-collector, kargo, kine, jaeger,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, opentelemetry-collector-fips, argo-cd-fips, datadog-agent-fips, k3s, k8sgateway, argo-workflows, jaeger, opentelemetry-collector-contrib, keda-fips, rke2-runtime, amazon-cloudwatch-agent-fips, splunk-otel-collector, amazon-cloudwatch-agent,...