108 matches found
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: longhorn-manager-fips, k8s-device-plugin, flux-source-controller-fips, nri-rabbitmq, monstache, cluster-api-gcp-controller-fips, newrelic-fluent-bit-output-fips, headlamp, metrics-server-fips, go-discover, osv-scanner, kube-metrics-adapter, mesosphere-vsphere-csi,...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: longhorn-manager-fips, spegel, blob-csi-fips, k8s-device-plugin, chainctl, opentelemetry-operator, flux-source-controller-fips, nri-rabbitmq, rancher-machine, velero-plugin-for-microsoft-azure-fips, monstache, grafana-alloy, cluster-api-gcp-controller-fips,...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: longhorn-manager-fips, spegel, blob-csi-fips, k8s-device-plugin, chainctl, opentelemetry-operator, flux-source-controller-fips, nri-rabbitmq, rancher-machine, velero-plugin-for-microsoft-azure-fips, monstache, grafana-alloy, cluster-api-gcp-controller-fips,...
EUVD-2023-3019
Malicious code in bioql PyPI...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: rabbitmq-cluster-operator, google-osconfig-agent, terraform-provider-azapi, docker-credential-gcr, kpt, cerbos, nri-rabbitmq, dgraph, plugin-barman-cloud, monstache, bom, timescaledb-tune, trivy, grafana-alloy, k3d, headlamp, swagger, argo-events, tkn,...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: blobfuse2, grafana-operator, mattmoor-chainit, blob-csi-fips, rancher-machine, prometheus-beat-exporter-fips, vault-k8s, memcached-exporter-fips, lvm-driver, apm-server-fips, newrelic-fluent-bit-output, stakater-reloader, kube-vip, sftpgo-plugin-geoipfilter, nemo,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: blobfuse2, grafana-operator, mattmoor-chainit, blob-csi-fips, rancher-machine, prometheus-beat-exporter-fips, vault-k8s, memcached-exporter-fips, lvm-driver, apm-server-fips, newrelic-fluent-bit-output, stakater-reloader, kube-vip, sftpgo-plugin-geoipfilter, nemo,...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: eks-distro, spegel, yace, blob-csi-fips, k8s-device-plugin, chainctl, flux-source-controller-fips, nri-rabbitmq, openbao-fips, trivy, packer-fips, esbuild, temporal-ui-server-fips, vt-cli, podinfo, aws-sigv4-proxy, newrelic-fluent-bit-output,...
GO-2023-2355 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving
Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving...
eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations
Impact The eventing-gitlab cluster-local server doesn't set ReadHeaderTimeout which could lead do a DDoS attack, where a large group of users send requests to the server causing the server to hang for long enough to deny it from being available to other users, also know as a Slowloris...
GHSA-99JV-8292-2HPM eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations
Impact The eventing-gitlab cluster-local server doesn't set ReadHeaderTimeout which could lead do a DDoS attack, where a large group of users send requests to the server causing the server to hang for long enough to deny it from being available to other users, also know as a Slowloris...
Denial Of Service (DoS)
github.com/knative-extensions/eventing-github/ is vulnerable to Denial Of Service DoS. The vulnerability is caused due to missing ReadHeaderTimeout setting in the server. This could lead to a DDoS attack, where a large number of users send requests causing it to hang...
GHSA-V7HC-87JC-QRRR eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations
Impact The eventing-github cluster-local server doesn't set ReadHeaderTimeout which could lead do a DDoS attack, where a large group of users send requests to the server causing the server to hang for long enough to deny it from being available to other users, also know as a Slowloris...
eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations
Impact The eventing-github cluster-local server doesn't set ReadHeaderTimeout which could lead do a DDoS attack, where a large group of users send requests to the server causing the server to hang for long enough to deny it from being available to other users, also know as a Slowloris...
The vulnerability of the Knative Serving deployment and application management tool, related to uncontrolled resource consumption, allows a attacker to cause service failures.
The vulnerability of the Knative Serving deployment and application management tool is related to an uncontrolled resource consumption when processing endpoints in the /metrics directory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2023-48713
Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...
Design/Logic Flaw
Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...
CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler
Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...
CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler
Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...
CVE-2023-48713
Knative Serving (on Kubernetes) contains a DoS flaw (CVE-2023-48713) caused by an unbound memory allocation in the /metrics response. If an attacker controls a pod sufficiently to influence its responses, they can trigger a denial of service in the autoscaler. The issue is specific to the metrics...