83 matches found
CVE-2021-27098
In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 certificate with a URI SAN for a SPIFFE ID that the agent is not authorized to...
GHSA-M5VV-6R4H-3VJ9 vulnerabilities
Vulnerabilities for packages: trivy, cluster-autoscaler-fips, argo-events, harbor-registry-fips, tekton-chains, pulumi, cosign, argo-workflows, fulcio, prometheus-operator, timestamp-authority, spire-server-fips, grafana-mimir, request-1276, guac, rekor, falcoctl-fips, trino, argo-cd, flyte, flux...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: bank-vaults, timestamp-authority, thanos, tekton-chains, grafana-mimir, sops, druid, cortex, secrets-store-csi-driver-provider-azure, kubescape, flyte, fulcio, chezmoi, rook, policy-controller, flux-kustomize-controller, cosign, boring-registry, buildkitd,...
GHSA-95PR-FXF5-86GV vulnerabilities
Vulnerabilities for packages: tekton-chains, slsa-verifier, wolfictl, falcoctl, spire-server-fips, zot, vexctl, gitsign, policy-controller-fips, melange, falcoctl-fips, ko-fips, skaffold, ko, kubescape, zarf, neuvector-sigstore-interface, flux-source-controller, chainctl, apko, spire-server,...
GHSA-95PR-FXF5-86GV vulnerabilities
Vulnerabilities for packages: tekton-chains, wolfictl, kubescape, policy-controller, spire-server, ko, zot, melange, apko, aactl, goreleaser, zarf, neuvector-sigstore-interface, flux-source-controller, gitsign, falcoctl, vexctl, tkn, slsa-verifier, skaffold...
GHSA-88JX-383Q-W4QC vulnerabilities
Vulnerabilities for packages: tekton-chains, wolfictl, kubescape, policy-controller, spire-server, ko, zot, melange, apko, aactl, goreleaser, zarf, neuvector-sigstore-interface, flux-source-controller, gitsign, falcoctl, vexctl, tkn, slsa-verifier, skaffold...
CVE-2024-29903 vulnerabilities
Vulnerabilities for packages: tekton-chains, wolfictl, kubescape, policy-controller, spire-server, ko, zot, melange, apko, aactl, goreleaser, zarf, neuvector-sigstore-interface, flux-source-controller, gitsign, falcoctl, vexctl, tkn, slsa-verifier, skaffold...
CVE-2024-29903 vulnerabilities
Vulnerabilities for packages: tekton-chains, slsa-verifier, wolfictl, falcoctl, spire-server-fips, zot, vexctl, gitsign, policy-controller-fips, melange, falcoctl-fips, ko-fips, skaffold, ko, kubescape, zarf, neuvector-sigstore-interface, flux-source-controller, chainctl, apko, spire-server,...
CVE-2024-29902 vulnerabilities
Vulnerabilities for packages: tekton-chains, slsa-verifier, wolfictl, falcoctl, spire-server-fips, zot, vexctl, gitsign, policy-controller-fips, melange, falcoctl-fips, ko-fips, skaffold, ko, kubescape, zarf, neuvector-sigstore-interface, flux-source-controller, chainctl, apko, spire-server,...
CVE-2024-29902 vulnerabilities
Vulnerabilities for packages: tekton-chains, wolfictl, kubescape, policy-controller, spire-server, ko, zot, melange, apko, aactl, goreleaser, zarf, neuvector-sigstore-interface, flux-source-controller, gitsign, falcoctl, vexctl, tkn, slsa-verifier, skaffold...
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: conftest-fips, trivy, grype, loki, wolfictl, buf, conftest, spire-server-fips, zot, dagger, kargo, melange, buildkitd, crossplane, ko, kubescape, up, cadvisor-fips, spire-server, cadvisor, kaniko, cilium-cli, ctop, syft, docker-compose, tkn, aactl, prometheus...
GHSA-MQ39-4GV4-MVPX vulnerabilities
Vulnerabilities for packages: conftest-fips, trivy, grype, loki, wolfictl, buf, conftest, spire-server-fips, zot, dagger, kargo, melange, buildkitd, crossplane, ko, kubescape, up, cadvisor-fips, spire-server, cadvisor, kaniko, cilium-cli, ctop, syft, docker-compose, tkn, aactl, prometheus...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: bank-vaults, timestamp-authority, tekton-chains, wolfictl, sops, gomplate, skopeo, kubescape, frp, fulcio, kargo, policy-controller, flux-kustomize-controller, cloudflared, dgraph, rook, temporal-ui-server, cosign, kots, kube-rbac-proxy, spire-server,...
CVE-2024-28122 vulnerabilities
Vulnerabilities for packages: mc-fips, minio, spire-server, minio-fips, spire-server-fips, falcoctl, boring-registry, external-secrets-fips, mc, boring-registry-fips, falcoctl-fips...
GHSA-HJ3V-M684-V259 vulnerabilities
Vulnerabilities for packages: mc-fips, minio, spire-server, minio-fips, spire-server-fips, falcoctl, boring-registry, external-secrets-fips, mc, boring-registry-fips, falcoctl-fips...
CVE-2024-21664 vulnerabilities
Vulnerabilities for packages: tekton-chains, boring-registry, gitsign, spire-server, falcoctl, vexctl, mc, kubescape, minio...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-aws-cloudwatchlogs, grype, tekton-chains, pulumi, cosign, crossplane-provider-aws-s3, slsa-verifier, argo-workflows, crossplane-provider-aws-route53, wolfictl, crossplane-provider-aws-cloudfront,...
GHSA-VFP6-JRW2-99G9 vulnerabilities
Vulnerabilities for packages: apko, skaffold, spire-server, ko, tekton-chains, cosign, policy-controller, slsa-verifier, spire-server-fips, kubescape, melange, flux-source-controller, tkn, aactl, falcoctl-fips...