35 matches found
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: nri-apache, nri-redis, buildkitd, docker-cli-buildx, gomplate, gitlab-runner, grafana-operator, newrelic-infrastructure-agent, kubelet-csr-approver, kyverno-notation-aws, addon-resizer, mailpit, fluent-bit-plugin-loki, cue, kubernetes-dashboard, gogatekeeper,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: flux, external-secrets-operator, ingress-nginx-controller, flux-image-automation-controller, hubble, supercronic, github-mcp-server, metacontroller, grafana-operator, temporal, flux-image-reflector-controller, aws-privateca-issuer, dgraph,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: external-secrets-operator, overmind, gomplate-fips, chezmoi, k8ssandra-client, argo-rollouts, azuredisk-csi, crossplane-provider-aws-lambda-fips, db-operator, kubo-fips, longhorn-cli-fips, minify, opentelemetry-operator, timoni, keda-fips, dragonfly-operator-fips,...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: external-secrets-operator, overmind, gomplate-fips, chezmoi, k8ssandra-client, argo-rollouts, azuredisk-csi, crossplane-provider-aws-lambda-fips, db-operator, kubo-fips, longhorn-cli-fips, minify, opentelemetry-operator, timoni, keda-fips, dragonfly-operator-fips,...
EUVD-2022-0837
Malicious code in bioql PyPI...
EUVD-2023-1539
Malicious code in bioql PyPI...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, shfmt, gostatsd, grafana-operator, terraform-provider-time, addon-resizer, git-lfs, local-path-provisioner, vault-benchmark, kubeflow-katib, secrets-store-csi-driver-provider-aws, blobfuse2, kserve-rest-proxy,...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: azurefile-csi-fips, kubernetes-dashboard-fips, nvidia-nsight-compute-13.2, rancher-machine, azuredisk-csi-fips, kuberay-operator, vexctl, etcd-fips, addon-resizer, nats, node-problem-detector-fips, prometheus-adapter, yace-fips, terraform-provider-time, blob-csi-fips...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: azurefile-csi-fips, kubernetes-dashboard-fips, nvidia-nsight-compute-13.2, rancher-machine, azuredisk-csi-fips, kuberay-operator, vexctl, etcd-fips, addon-resizer, nats, node-problem-detector-fips, prometheus-adapter, yace-fips, terraform-provider-time, blob-csi-fips...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, cass-operator, buildkitd, dockerize, docker-credential-acr-env, gomplate, grafana-operator, cni-plugins, kor, newrelic-infrastructure-agent, dive, yq, kubernetes-event-exporter, go-bindata, cue, kubernetes-dashboard, k3s, yt...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: flux, k8sgpt, policy-controller, py3-cassandra-medusa, opentelemetry-collector, argo-events, buildkitd, grafana-agent-operator, flux-image-reflector-controller, sqlpad, tempo, wal-g, fluent-bit-plugin-loki, py3-azure-identity, step-ca, falcoctl, cortex, flyte, nuclei...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: policy-controller, spicedb, aws-efs-csi-driver, cass-operator, buildkitd, gomplate, kor, grafana-operator, newrelic-infrastructure-agent, kubeflow, kubernetes-event-exporter, crossplane-provider-azure-storage, flannel, kubernetes-dashboard, k3s, pulumi, up,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: timoni, temporal-server, secrets-store-csi-driver-provider-gcp, falcoctl, prometheus-pushgateway, argo-workflows, amass, pulumi-language-dotnet, cortex, terragrunt, hubble-ui-backend-fips, crossplane-provider-aws-ec2, kaf, nfs-subdir-external-provisioner,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: aactl, terraform-provider-sendgrid, k3d, volume-modifier-for-k8s-fips, prometheus-blackbox-exporter, kubernetes-csi-livenessprobe-fips, scorecard, aws-efs-csi-driver-fips, slsa-verifier, spark-operator, up, kiam, prometheus-stackdriver-exporter,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: prometheus-blackbox-exporter, terraform-provider-sendgrid, kubevela, buildkitd, cortex, scorecard, k3d, aactl, slsa-verifier, up, dgraph, kubeflow, spark-operator, src, kubescape...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: k8sgpt, nri-prometheus, timoni, terraform-provider-sendgrid, secrets-store-csi-driver-provider-gcp, falcoctl, minio, prometheus-pushgateway, amass, prometheus-postgres-exporter-fips, flux-kustomize-controller, kpt, pulumi-language-dotnet, dex, crossplane-provider-aws...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, buildkitd, nginx-mainline, gomplate, newrelic-infrastructure-agent, ko, kubeflow, cue, pulumi, flux-notification-controller, flux-source-controller, nodetaint, nats, envoy-ratelimit, haproxy-ingress, hugo, certificate-transparency,...
The vulnerability of the secrets-store-csi-driver driver of the Kubernetes cluster management software allows a hacker to gain unauthorized access to protected information.
The vulnerability of the secrets-store-csi-driver driver in the Kubernetes cluster management software is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Insertion Of Sensitive Information Into Log File
sigs.k8s.io/secrets-store-csi-driver is vulnerable to Insertion of Sensitive Information Into Log File. An attacker with access to the driver logs could observe service account tokens due to the NodePublishVolume function of nodeserver.go...