CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, secrets-store-csi-driver-provider-azure, pulumi-language-dotnet, kots, newrelic-infrastructure-agent, terraform-provider-aws, apisix-ingress-controller, crossplane-provider-family-aws, rabbitmq-cluster-operator,...

AZL-35667 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-37119 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, secrets-store-csi-driver-provider-azure, newrelic-infrastructure-agent, dive, rabbitmq-cluster-operator, configmap-reload, src-fingerprint, hello-world-golang, newrelic-infra-operator, temporal, pulumi,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: slsa-verifier, falcosidekick, crossplane-provider-aws-sns, cluster-proportional-autoscaler, litefs, prometheus-alertmanager-fips, gitness, temporal-fips, crossplane-provider-aws-firehose, doppler-kubernetes-operator, spicedb, guac, terraform-provider-azurerm,...

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.10-20

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.10-20. A patched version of the package is available...

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.10-19

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.10-19. A patched version of the package is available...

AZL-35443 CVE-2023-48795 affecting package node-problem-detector for versions less than 0.8.20-2

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, up, kubescape, scorecard, kubevela, slsa-verifier, terraform-provider-sendgrid, aactl, spark-operator, src, k3d, kubeflow, buildkitd, cortex...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: k3d, falcoctl-fips, plutono-fips, terraform-provider-sendgrid-fips, slsa-verifier, dgraph, kubeflow, kubernetes-csi-livenessprobe-fips, cortex, timestamp-authority-fips, aactl, prometheus-adapter-fips, kiam, dynamic-localpv-provisioner-fips, kube-oidc-proxy, buildkit...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, kots, newrelic-infrastructure-agent, terraform-provider-aws, terraform-provider-azurerm, pulumi, secrets-store-csi-driver-provider-gcp, flux-source-controller, pulumi-kubernetes-operator, cortex, slsa-verifier, wireguard-go, atlantis,...

AZL-31336 CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-35038 CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-35041 CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

AZL-33628 CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

AZL-35039 CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...