CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, cadvisor, cri-tools, newrelic-nri-statsd, hello-world-golang, flux-source-controller, fq, flyte, petname, xcaddy, kubernetes-csi-driver-hostpath, nri-mysql, speedtest-go, bank-vaults, src-fingerprint, tekton-chains, dockerize, yam,...

MGASA-2024-0093 Updated clojure packages fix security vulnerability

An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service DoS via the clojure.core$partial$fn5920 function. CVE-2024-22871...

GHSA-592J-995H-P23J vulnerabilities

Vulnerabilities for packages: ruby, jruby...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: conftest-fips, kubescape, buf, trivy, melange, prometheus, spire-server, conftest, spire-server-fips, loki, grype, buildkitd, cilium-cli, cadvisor, kargo, syft, docker-compose, up, ko, dagger, ctop, tkn, kaniko, aactl, crossplane, zot, cadvisor-fips, wolfictl...

GHSA-G623-JCGG-MHMM vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: neuvector, dgraph, melange, bank-vaults, skopeo, falcoctl, argo-workflows-fips, caddy, external-secrets-fips, ko-fips, kube-rbac-proxy-fips, spire-server-fips, step-ca, flux-kustomize-controller, vault, vexctl, ko, rekor, zot, cloudflared, wolfictl, tekton-chains,...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, boring-registry, mc, mc-fips, boring-registry-fips, falcoctl, external-secrets-fips, minio-fips, spire-server-fips, minio, spire-server...

CVE-2024-27289 vulnerabilities

Vulnerabilities for packages: argo-workflows, wavefront-collector-for-kubernetes, trillian-fips, caddy, argo-workflows-fips, kots, caddy-fips, step, trillian, step-ca...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kube-bench, src, kots, step, amass, temporal-server-fips, caddy, argo-workflows-fips, temporal-server, falcosidekick-fips, step-ca, argo-workflows, trillian-fips, caddy-fips, spicedb, k3s, ferretdb, kube-bench-fips, wavefront-collector-for-kubernetes, kine, trillian...

GHSA-H3M7-RQC4-7H9P vulnerabilities

Vulnerabilities for packages: spicedb...

GHSA-6VQW-3V5J-54X4 vulnerabilities

Vulnerabilities for packages: az, py3-cryptography, ggshield, py3-cassandra-medusa, request-1276, mitmproxy, kubeflow-pipelines...

GHSA-X989-52FC-4VR4 vulnerabilities

Vulnerabilities for packages: hubble-fips, hubble, hubble-ui...

MGASA-2024-0045 Updated wireshark packages fix security vulnerabilities

The updated packages fix security vulnerabilities: RTPS dissector memory leak. CVE-2023-5371 SSH dissector invalid read of memory blocks. CVE-2023-6174 NetScreen File Parsing Heap-based Buffer Overflow. CVE-2023-6175 GVCP dissector crash via packet injection or crafted capture file. CVE-2024-0208...

CVE-2024-20982 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2024-20923 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: cilium-cli, zarf, flux-helm-controller, eksctl, helm-operator, k9s, kubevela, kots, kubescape, helm-push, trivy, up, zot, flux-source-controller, k8sgpt, chartmuseum...

CVE-2024-25062 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9...

GHSA-J86V-2VJR-FG8F vulnerabilities

Vulnerabilities for packages: dgraph, etcd, etcd-fips...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: slsa-verifier, docker-machine-driver-harvester, falcoctl-fips, goreleaser, eksctl, k3d, kots, kubescape, kubevela, trivy, nerdctl, chartmuseum, guac, policy-controller-fips, flux, skopeo, falcoctl, argo-workflows-fips, pulumi, ko-fips, cosign-fips, helm-operator-fips...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: k3d, kots, kubescape, trivy, podman, nerdctl, skopeo, newrelic-infrastructure-agent, grype, buildkitd, cadvisor, syft, docker, runc, k3s, ctop, zarf, kaniko, skaffold, k9s, kubernetes, zot, wolfictl...