CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...

CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...

Source controller 安全漏洞

Source controller is a component of the Flux project. A security vulnerability exists in source-controller versions prior to 1.2.5. An attacker can exploit this vulnerability to gain access to Azure Blob Storage...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: kots, cilium-cli, kubescape, trivy, k9s, helm-push, zarf, eksctl, flux-source-controller, chartmuseum, k8sgpt, kubevela, helm-operator, zot, flux-helm-controller, up...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: chartmuseum, k8sgpt, k9s, helm-operator, helm-push, kubevela, zot, kubescape, cilium-cli, trivy, eksctl, flux-helm-controller, flux-source-controller, up, kots, zarf...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kots, cilium-cli, kubescape, trivy, k9s, helm-push, zarf, eksctl, flux-source-controller, chartmuseum, k8sgpt, kubevela, helm-operator, zot, flux-helm-controller, up...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: tekton-chains, spire-server, apko, policy-controller, skaffold, kubescape, aactl, slsa-verifier, ko, spire-server-fips, flux-source-controller, tkn, cosign, falcoctl-fips, melange...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: tekton-chains, spire-server, apko, policy-controller, skaffold, kubescape, aactl, slsa-verifier, ko, spire-server-fips, flux-source-controller, tkn, cosign, falcoctl-fips, melange...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: tekton-chains, k3s, skaffold, ctop, kubescape, aactl, slsa-verifier, paranoia, scorecard, spire-server-fips, rancher-agent, chartmuseum, bom, k3d, falcoctl-fips, kpt, up...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, prometheus-blackbox-exporter, kubeflow-fips, terraform-provider-sendgrid-fips, src, kubescape, kube-oidc-proxy, metrics-server-fips, kubernetes-csi-livenessprobe, up, spark-operator, kiam, cortex, dgraph, slsa-verifier, vault-csi-provider,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, aactl, terraform-provider-sendgrid, kubescape, dgraph, cortex, kubeflow, slsa-verifier, k3d, spark-operator, prometheus-blackbox-exporter, up, buildkitd, src, scorecard...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubescape, newrelic-infrastructure-agent, pulumi-kubernetes-operator, stakater-reloader, terraform-provider-azurerm, kubevela, gobuster, ollama, conftest, pulumi-language-java, spark-operator, terraform-provider-sendgrid, nats, kpt, ko, grype, pulumi-language-dotnet,...

spider-flow code issue vulnerability

spider-flow is a crawler platform open source by sssssssss-team. Spider-flow 0.5.0 previous version of a code problem vulnerability , the vulnerability stems from the component API file src/main/java/org/spiderflow/controller/DataSourceController.java in the DriverManager. There is an unknown...

Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. for building next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1 that originates from the installation of invalid flow rule...