GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium-cli, snyk-cli, kyverno, telegraf, trivy, aactl, spire-server, cert-manager, k3s, gitea, zot, knative-serving, minio, cilium, kubernetes, osv-scanner, external-secrets-operator, gitlab-kas, k9s, zarf, nerdctl, prometheus-operator, containerd, trivy-operator,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium-cli, snyk-cli, kyverno, telegraf, docker-machine-driver-harvester, aactl, trivy, spire-server, cert-manager, k3s, gitea, zot, knative-serving, minio, cilium, kubernetes, osv-scanner, external-secrets-operator, gitlab-kas, k9s, zarf, nerdctl, prometheus-operato...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: trivy, syft, spire-server, k3s, zot, terragrunt, opentofu, scorecard, gitlab-kas, k9s, prometheus-operator, step, trivy-operator, pulumi-kubernetes-operator, witness, fscrypt, gomplate, opentelemetry-collector, pulumi, openbao, snyk-cli, chezmoi, dagger,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: cilium-cli, snyk-cli, kyverno, telegraf, trivy, aactl, chezmoi, syft, spire-server, cert-manager, dagger, gptscript, gitea, k3s, pulumi-language-java, zot, knative-serving, minio, terragrunt, opentofu, cilium, kubernetes, osv-scanner, scorecard, nuclei, datadog-agent...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium-cli, snyk-cli, kyverno, telegraf, aactl, spire-server, cert-manager, k3s, zot, buildah, knative-serving, minio, docker-cli-buildx, cilium, kubernetes, external-secrets-operator, gitlab-kas, nerdctl, prometheus-operator, containerd, kubernetes-dashboard, istio,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: git-lfs, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, juicefs-csi-driver, aws-fsx-csi-driver-fips, knative-operator-fips, mockery, nri-apache, nri-f5, atlantis, kubewatch, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: aws-fsx-csi-driver-fips, crossplane-provider-aws-efs-fips, kubevirt-cdi-operator-fips, step-fips, opensearch-k8s-operator-fips, gitlab-cng, oauth2-proxy-fips, slsa-verifier, omni-fips, sonobuoy-fips, telegraf, gitness, consul-k8s, neuvector-dbgen, lvm-driver-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: git-lfs, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, juicefs-csi-driver, aws-fsx-csi-driver-fips, knative-operator-fips, mockery, nri-apache, nri-f5, atlantis, kubewatch, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, kiali-fips, knative-operator-fips, mockery, nri-apache, nri-f5, apache-exporter, govulncheck, nats, prometheus-pgbouncer-exporter-fips, gitlab-cng, ingress-nginx-controller-fips, kafkaexporter-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, kiali-fips, knative-operator-fips, mockery, nri-apache, nri-f5, apache-exporter, govulncheck, nats, prometheus-pgbouncer-exporter-fips, gitlab-cng, ingress-nginx-controller-fips, kafkaexporter-fips,...

EUVD-2023-3019

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: mockgen, kube-logging-operator, rancher-security-scan, emissary, nri-f5, nri-apache, buildkitd, dapr, gobump, delve, ratify, cis-operator, ko, azure-service-operator, rancher-agent, prometheus-operator, oauth2-proxy, tigera-operator, kyverno, rancher-system-agent,...

GO-2023-2355 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving...

The vulnerability of the Knative Serving deployment and application management tool, related to uncontrolled resource consumption, allows a attacker to cause service failures.

The vulnerability of the Knative Serving deployment and application management tool is related to an uncontrolled resource consumption when processing endpoints in the /metrics directory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-48713

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...

Design/Logic Flaw

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...

CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...

CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...

CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...

Knative Serving Security Vulnerability

Knative Serving is a Kubernetes-based build from Knative that supports the deployment and servicing of applications and features as serverless containers. A security vulnerability exists in Knative Serving that stems from a memory allocation error, which could lead to a denial of service by an...