GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: boring-registry, mc, boring-registry-fips, falcoctl, spire-server-fips, minio-fips, minio, falcoctl-fips, spire-server, mc-fips, external-secrets-fips...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: spire-server, kubescape, vexctl, minio, gitsign, boring-registry, mc, falcoctl, tekton-chains...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: actions-runner-controller, kubescape, kaniko, crossplane-provider-aws-cloudfront, kubevela, crossplane-provider-aws-lambda, gomplate, pulumi-kubernetes-operator, crossplane-provider-aws-sns, flux-source-controller, tkn, crossplane-provider-aws-firehose, skaffold,...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: spire-server, kubescape, apko, flux-source-controller, aactl, cosign, slsa-verifier, ko, tkn, melange, tekton-chains, skaffold, policy-controller...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: kubescape, melange, spire-server-fips, slsa-verifier, flux-source-controller, ko, policy-controller, falcoctl-fips, tkn, spire-server, skaffold, tekton-chains, cosign, aactl, apko...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: kubescape, melange, spire-server-fips, slsa-verifier, flux-source-controller, ko, policy-controller, falcoctl-fips, tkn, spire-server, skaffold, tekton-chains, cosign, aactl, apko...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: spire-server, kubescape, apko, flux-source-controller, aactl, cosign, slsa-verifier, ko, tkn, melange, tekton-chains, skaffold, policy-controller...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: kubescape, paranoia, bom, rancher-agent, spire-server-fips, chartmuseum, k3s, kpt, slsa-verifier, ctop, falcoctl-fips, up, tekton-chains, skaffold, k3d, scorecard, aactl...

CVE-2021-27098

In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 certificate with a URI SAN for a SPIFFE ID that the agent is not authorized to...