GHSA-J7VJ-RW65-4V26 vulnerabilities

Vulnerabilities for packages: dex, kubernetes-ingress-defaultbackend-fips, age, etcd-fips, hubble, aws-flb-firehose-fips, dockerize-fips, flux, pulumi, harbor-registry, aactl, kubeflow-katib, atlantis-fips, crossplane-provider-aws-sns, k3s, docker-compose, cert-manager-cmctl-fips, mc-fips,...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: dex, kubernetes-ingress-defaultbackend-fips, age, etcd-fips, kubernetes-dashboard-web, aws-flb-firehose-fips, dockerize-fips, flux, kubernetes-csi-external-resizer, harbor-registry, aactl, checksec, yunikorn-web, kubernetes-csi-external-attacher-fips, kubeflow-katib,...

CVE-2022-3162 affecting package prometheus-adapter for versions less than 0.10.0-17

CVE-2022-3162 affecting package prometheus-adapter for versions less than 0.10.0-17. A patched version of the package is available...

Azure Linux 3.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.12.0-2

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.12.0-2. A patched version of the package is available...

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.10.0-16

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.10.0-16. A patched version of the package is available...

AZL-54522 CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.10.0-16

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54398 CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.12.0-2

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2022-32149 affecting package prometheus-adapter for versions less than 0.10.0-14

CVE-2022-32149 affecting package prometheus-adapter for versions less than 0.10.0-14. A patched version of the package is available...

CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-45288 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45142 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-45142 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24791 vulnerabilities

Vulnerabilities for packages: dex, age, etcd-fips, hubble, newrelic-infra-operator, dockerize-fips, flux, pulumi, harbor-registry, aactl, kubeflow-katib, atlantis-fips, k3s, docker-compose, cert-manager-cmctl-fips, mc-fips, fluent-operator-fips, step-fips, azcopy-fips, tekton-chains-fips,...

CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.10.0-12

CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.10.0-12. A patched version of the package is available...

AZL-38761 CVE-2023-45288 affecting package prometheus-adapter for versions less than 0.12.0-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2

CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2. A patched version of the package is available...

AZL-35594 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.10.0-12

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35671 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...