9 matches found
CVE-2025-11065 affecting package rook for versions less than 1.6.2-29
CVE-2025-11065 affecting package rook for versions less than 1.6.2-29. A patched version of the package is available...
CVE-2025-30204 affecting package rook for versions less than 1.6.2-29
CVE-2025-30204 affecting package rook for versions less than 1.6.2-29. A patched version of the package is available...
CVE-2024-51744 affecting package rook for versions less than 1.6.2-26
CVE-2024-51744 affecting package rook for versions less than 1.6.2-26. A patched version of the package is available...
AZL-77535 CVE-2025-30204 affecting package rook 1.6.2-27
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...
CVE-2022-3162 affecting package rook for versions less than 1.6.2-24
CVE-2022-3162 affecting package rook for versions less than 1.6.2-24. A patched version of the package is available...
CVE-2024-28180 affecting package rook for versions less than 1.6.2-23
CVE-2024-28180 affecting package rook for versions less than 1.6.2-23. A patched version of the package is available...
CVE-2024-6104 affecting package rook for versions less than 1.6.2-21
CVE-2024-6104 affecting package rook for versions less than 1.6.2-21. A patched version of the package is available...
AZL-13783 CVE-2022-3162 affecting package rook for versions less than 1.6.2-25
Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...
AZL-33641 CVE-2021-44716 affecting package rook for versions less than 1.6.2-19
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...