GHSA-3CQM-MF7H-PRRJ vulnerabilities

Vulnerabilities for packages: s3proxy, s3proxy-fips, knative-kafka-broker...

CVE-2021-0341 vulnerabilities

Vulnerabilities for packages: s3proxy, s3proxy-fips, knative-kafka-broker...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: conftest-fips, harbor-scanner-trivy, nginx-prometheus-exporter-fips, wave-fips, octo-sts, k8s-metacollector-fips, temporal, prometheus-adapter-fips, sonobuoy, eck-operator-fips, opencost, helm-operator-fips, kubernetes-csi-node-driver-registrar-fips, nemo,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: conftest-fips, nri-kubernetes, otel-cli, harbor-scanner-trivy, azcopy-fips, nginx-prometheus-exporter-fips, ksops, wave-fips, http-echo, volcano-fips, mongodb-kubernetes-operator-fips, restic, octo-sts, k8s-metacollector-fips, kbld-fips, temporal,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: conftest-fips, nri-kubernetes, otel-cli, harbor-scanner-trivy, azcopy-fips, nginx-prometheus-exporter-fips, ksops, wave-fips, http-echo, volcano-fips, mongodb-kubernetes-operator-fips, restic, octo-sts, k8s-metacollector-fips, kbld-fips, temporal,...

EUVD-2023-3019

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: cis-operator, gendesk, emissary, flux, wire-go, cg, portieris, chartmuseum, argo-events, k8sgateway, undock, vault-csi-provider, kubernetes-dashboard-web, kyverno-notation-aws, kind, neuvector, helm-operator, kapp-controller, libnvidia-container, aws-otel-collector,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: newrelic-nri-statsd, nvidia-nsight-compute-13.2, kube-logging-operator-custom-runner-fips, lvm-driver, octo-sts, secrets-store-csi-driver-fips, prometheus-nats-exporter, docker-credential-ecr-login, wazero-fips, memcached-exporter-fips, karpenter-fips, nemo, vault-k8...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: newrelic-nri-statsd, nvidia-nsight-compute-13.2, kube-logging-operator-custom-runner-fips, lvm-driver, octo-sts, secrets-store-csi-driver-fips, prometheus-nats-exporter, docker-credential-ecr-login, wazero-fips, memcached-exporter-fips, karpenter-fips, nemo, vault-k8...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: conftest-fips, argo-workflows, otel-cli, harbor-scanner-trivy, crossplane-provider-gcp, ksops, wave-fips, flyte, http-echo, restic, kbld-fips, temporal, neuvector, local-static-provisioner, kyverno-fips, elvish, grpcurl, gpu-operator, kbld, pombump, trust-manager,...

GO-2023-2355 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving...

GHSA-99JV-8292-2HPM eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations

Impact The eventing-gitlab cluster-local server doesn't set ReadHeaderTimeout‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as a Slowloris‬...

eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations

Impact The eventing-gitlab cluster-local server doesn't set ReadHeaderTimeout‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as a Slowloris‬...

Denial Of Service (DoS)

github.com/knative-extensions/eventing-github/ is vulnerable to Denial Of Service DoS. The vulnerability is caused due to missing ReadHeaderTimeout‬‭ setting in the server. This could lead to a DDoS attack, where a large number of users send requests causing it to hang...

GHSA-V7HC-87JC-QRRR eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations

Impact The eventing-github cluster-local server doesn't set ReadHeaderTimeout‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as a Slowloris‬...

eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations

Impact The eventing-github cluster-local server doesn't set ReadHeaderTimeout‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as a Slowloris‬...

The vulnerability of the Knative Serving deployment and application management tool, related to uncontrolled resource consumption, allows a attacker to cause service failures.

The vulnerability of the Knative Serving deployment and application management tool is related to an uncontrolled resource consumption when processing endpoints in the /metrics directory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-48713

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...

Design/Logic Flaw

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...

CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...