CVE-2024-45338 affecting package node-problem-detector for versions less than 0.8.15-3

CVE-2024-45338 affecting package node-problem-detector for versions less than 0.8.15-3. A patched version of the package is available...

AZL-54410 CVE-2024-45338 affecting package node-problem-detector for versions less than 0.8.15-3

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2. A patched version of the package is available...

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3. A patched version of the package is available...

CBL Mariner 2.0 Security Update: azcopy / blobfuse2 / cert-manager / cf-cli (CVE-2024-24786)

The version of azcopy / blobfuse2 / cert-manager / cf-cli installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24786 advisory. - The protojson.Unmarshal function can enter an infinite loop when...

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2. A patched version of the package is available...

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2. An upgraded version of the package is available that resolves this issue...

AZL-39505 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-38575 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, nats, timoni, pulumi-language-yaml, kubeflow, rook, cass-operator, flux, nri-discovery-kubernetes, crossplane-provider-aws-eks, skopeo, crossplane-provider-aws-cloudwatchlogs, trust-manager, grafana-operator, flannel, mc,...

AZL-37119 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35667 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, timestamp-authority-fips, cosign, nfs-subdir-external-provisioner, gomplate, pulumi, tekton-chains, kubernetes-event-exporter, metacontroller, thanos, cadvisor, dgraph, prometheus-elasticsearch-exporter, fulcio, hubble, skopeo,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, nats, newrelic-prometheus-configurator, wait-for-port, vite, timoni, pulumi-language-yaml, paranoia, ytt, go-bindata, lazygit, cass-operator, flux, nri-discovery-kubernetes, grafana-operator, nri-mysql, aws-load-balancer-controller, nerdctl, temporal,...

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.10-20

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.10-20. A patched version of the package is available...

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.10-19

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.10-19. A patched version of the package is available...