CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, paranoia, aws-flb-cloudwatch, temporal-server, vertical-pod-autoscaler, nodetaint, nri-kubernetes, nsc, cass-operator, kine, influx,...

MGASA-2024-0093 Updated clojure packages fix security vulnerability

An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service DoS via the clojure.core$partial$fn5920 function. CVE-2024-22871...

GHSA-592J-995H-P23J vulnerabilities

Vulnerabilities for packages: ruby, jruby...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: cadvisor, conftest, buildkitd, kaniko, melange, syft, loki, conftest-fips, aactl, kargo, tkn, spire-server, up, zot, trivy, grype, crossplane, cilium-cli, spire-server-fips, kubescape, ctop, dagger, ko, docker-compose, wolfictl, prometheus, cadvisor-fips, buf...

GHSA-G623-JCGG-MHMM vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, policy-controller, terragrunt, melange, goreleaser, fulcio, skaffold, gomplate, aactl, temporal, temporal-fips, minio-fips, step, temporal-ui-server, dgraph, kubescape, caddy-fips, wolfictl, temporal-ui-server-fips, slsa-verifier,...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: minio, external-secrets-fips, falcoctl-fips, minio-fips, mc, mc-fips, spire-server, spire-server-fips, boring-registry, falcoctl, boring-registry-fips...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: trillian-fips, argo-workflows-fips, temporal-server-fips, ferretdb, step-ca, wavefront-collector-for-kubernetes, kube-bench-fips, falcosidekick-fips, caddy, trillian, spicedb, step, kube-bench, src, argo-workflows, kots, caddy-fips, k3s, amass, kine, temporal-server...

CVE-2024-27289 vulnerabilities

Vulnerabilities for packages: trillian-fips, argo-workflows-fips, caddy-fips, step-ca, wavefront-collector-for-kubernetes, caddy, trillian, argo-workflows, step, kots...

GHSA-H3M7-RQC4-7H9P vulnerabilities

Vulnerabilities for packages: spicedb...

GHSA-6VQW-3V5J-54X4 vulnerabilities

Vulnerabilities for packages: request-1276, az, ggshield, kubeflow-pipelines, mitmproxy, airflow, py3-cassandra-medusa, py3-cryptography...

GHSA-X989-52FC-4VR4 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-fips, hubble...

MGASA-2024-0045 Updated wireshark packages fix security vulnerabilities

The updated packages fix security vulnerabilities: RTPS dissector memory leak. CVE-2023-5371 SSH dissector invalid read of memory blocks. CVE-2023-6174 NetScreen File Parsing Heap-based Buffer Overflow. CVE-2023-6175 GVCP dissector crash via packet injection or crafted capture file. CVE-2024-0208...

CVE-2024-20982 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2024-20923 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: chartmuseum, k8sgpt, flux-helm-controller, helm-push, k9s, zot, kubevela, cilium-cli, helm-operator, up, kubescape, flux-source-controller, eksctl, zarf, kots, trivy...

CVE-2024-25062 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9...

GHSA-J86V-2VJR-FG8F vulnerabilities

Vulnerabilities for packages: etcd, dgraph, etcd-fips...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, k3d, chartmuseum, cadvisor, policy-controller, buildkitd, zarf, skaffold, policy-controller-fips, loki, guac, nerdctl, crane, aactl, flux, timoni, k8sgpt, cosign, cri-tools, docker-credential-gcr, kargo, ko-fips, pulumi, helm-operator-fips,...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: k3d, cadvisor, buildkitd, kaniko, syft, skaffold, nerdctl, docker, newrelic-infrastructure-agent, zot, trivy, skopeo, grype, kubescape, ctop, runc, k3s, k9s, wolfictl, kubernetes, kots, zarf, podman...