42 matches found
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, containerd, external-dns, minio, snyk-cli, cilium, kaf, kubescape, external-secrets-operator, flux, helm, kine, prometheus-operator, trivy, aactl, istio, kyverno, prometheus, telegraf, gitea, trivy-operator, knative-serving, loki, nerdctl,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, containerd, external-dns, minio, snyk-cli, cilium, kaf, kubescape, external-secrets-operator, flux, helm, kine, prometheus-operator, trivy, aactl, istio, kyverno, prometheus, telegraf, gitea, trivy-operator, knative-serving, loki, nerdctl,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: terragrunt, containerd, external-dns, podman, nfpm, prometheus-operator, gptscript, aactl, kyverno, chezmoi, wolfictl, cilium-cli, buildah, k3s, zarf, pulumi, kubernetes-dashboard, pulumi-language-java, docker-cli-buildx, snyk-cli, kubescape, syft, kine, trivy,...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: act, opentelemetry-collector, containerd, external-dns, minio, pulumi-language-dotnet, snyk-cli, cilium, kaf, kubescape, nfpm, podman, gomplate, syft, external-secrets-operator, flux, helm, kine, prometheus-operator, gptscript, splunk-otel-collector, trivy, aactl,...
GHSA-JPPX-RXG9-JMRX vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, containerd, external-dns, minio, snyk-cli, cilium, kaf, podman, external-secrets-operator, flux, helm, kine, prometheus-operator, aactl, istio, kyverno, prometheus, telegraf, knative-serving, loki, nerdctl, spire-server, cloud-provider-aws,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, kubernetes-ingress-defaultbackend, aws-sigv4-proxy, crossplane-provider-aws-dynamodb-fips, prometheus-mongodb-exporter, flux, gitsign, opa-envoy, kube-conformance, pvc-autoresizer, hugo-fips, spegel, kube-rbac-proxy-fips,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: argo-cd, gitlab-cng, age, flux, sbom-scorecard, kube-conformance, amazon-k8s-cni, kubevirt-cdi-apiserver-fips, cloudflared-fips, consul-fips, local-path-provisioner, gosu-fips, vale, crossplane-provider-aws-cognitoidentity, ginkgo, protoc-gen-go-grpc, capslock,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, kubernetes-ingress-defaultbackend, aws-sigv4-proxy, crossplane-provider-aws-dynamodb-fips, prometheus-mongodb-exporter, flux, gitsign, opa-envoy, kube-conformance, pvc-autoresizer, hugo-fips, spegel, kube-rbac-proxy-fips,...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: guac, gitlab-cng, gitsign, metrics-server-fips, opa-envoy, pvc-autoresizer, nvidia-nsight-compute-12.8, spegel, kube-rbac-proxy-fips, newrelic-infra-operator, newrelic-nri-kube-events, runc, net-kourier-fips, pushprox-fips, kubernetes-csi-external-provisioner,...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: guac, gitlab-cng, gitsign, metrics-server-fips, opa-envoy, pvc-autoresizer, nvidia-nsight-compute-12.8, spegel, kube-rbac-proxy-fips, newrelic-infra-operator, newrelic-nri-kube-events, runc, net-kourier-fips, pushprox-fips, kubernetes-csi-external-provisioner,...
EUVD-2023-3019
Malicious code in bioql PyPI...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: guac, neuvector, nri-apache, grafana-alloy, nri-haproxy, nova, flux, karpenter, helm-push, controller-gen, kuberlr, ipfs-cluster, portieris, blob-csi, google-osconfig-agent, wgcf, argo-events, ini-file, wire-go, gatekeeper, headlamp, traefik,...
GO-2023-2355 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving
Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving...
The vulnerability of the Knative Serving deployment and application management tool, related to uncontrolled resource consumption, allows a attacker to cause service failures.
The vulnerability of the Knative Serving deployment and application management tool is related to an uncontrolled resource consumption when processing endpoints in the /metrics directory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2023-48713
Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...
Design/Logic Flaw
Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...
CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler
Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...
CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler
Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...
CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler
Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...
Knative Serving Security Vulnerability
Knative Serving is a Kubernetes-based build from Knative that supports the deployment and servicing of applications and features as serverless containers. A security vulnerability exists in Knative Serving that stems from a memory allocation error, which could lead to a denial of service by an...