104 matches found
GHSA-4F8R-QQR9-FQ8J vulnerabilities
Vulnerabilities for packages: falcoctl, flux-source-controller-fips, chainctl, gh, tekton-chains, wolfictl, zarf, tkn, neuvector-sigstore-interface, spire-server, sigstore-scaffolding-fips, neuvector-sigstore-interface-fips, tekton-chains-fips, kubescape, gitsign, spire-server-fips, trivy,...
CVE-2024-47534 vulnerabilities
Vulnerabilities for packages: falcoctl, flux-source-controller-fips, chainctl, gh, tekton-chains, wolfictl, zarf, tkn, neuvector-sigstore-interface, spire-server, sigstore-scaffolding-fips, neuvector-sigstore-interface-fips, tekton-chains-fips, kubescape, gitsign, spire-server-fips, trivy,...
Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.15.0 release
Red Hat OpenShift Pipelines 1.15.0 has been released. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments...
GHSA-95PR-FXF5-86GV vulnerabilities
Vulnerabilities for packages: falcoctl, chainctl, tekton-chains, wolfictl, zarf, tkn, ko-fips, neuvector-sigstore-interface, spire-server, tekton-chains-fips, kubescape, gitsign, ko, spire-server-fips, slsa-verifier, goreleaser, apko, flux-source-controller, skaffold, melange, tkn-fips,...
GHSA-95PR-FXF5-86GV vulnerabilities
Vulnerabilities for packages: wolfictl, goreleaser, melange, spire-server, zot, falcoctl, apko, policy-controller, kubescape, tkn, vexctl, zarf, aactl, gitsign, skaffold, ko, neuvector-sigstore-interface, flux-source-controller, slsa-verifier, tekton-chains...
GHSA-88JX-383Q-W4QC vulnerabilities
Vulnerabilities for packages: wolfictl, goreleaser, melange, spire-server, zot, falcoctl, apko, policy-controller, kubescape, tkn, vexctl, zarf, aactl, gitsign, skaffold, ko, neuvector-sigstore-interface, flux-source-controller, slsa-verifier, tekton-chains...
CVE-2024-29903 vulnerabilities
Vulnerabilities for packages: falcoctl, chainctl, tekton-chains, wolfictl, zarf, tkn, ko-fips, neuvector-sigstore-interface, spire-server, tekton-chains-fips, kubescape, gitsign, ko, spire-server-fips, slsa-verifier, goreleaser, apko, flux-source-controller, skaffold, melange, tkn-fips,...
CVE-2024-29902 vulnerabilities
Vulnerabilities for packages: wolfictl, goreleaser, melange, spire-server, zot, falcoctl, apko, policy-controller, kubescape, tkn, vexctl, zarf, aactl, gitsign, skaffold, ko, neuvector-sigstore-interface, flux-source-controller, slsa-verifier, tekton-chains...
CVE-2024-29902 vulnerabilities
Vulnerabilities for packages: falcoctl, chainctl, tekton-chains, wolfictl, zarf, tkn, ko-fips, neuvector-sigstore-interface, spire-server, tekton-chains-fips, kubescape, gitsign, ko, spire-server-fips, slsa-verifier, goreleaser, apko, flux-source-controller, skaffold, melange, tkn-fips,...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: cosign, kube-rbac-proxy, rook, wolfictl, dex, sigstore-scaffolding, goreleaser, melange, spire-server, grpc-health-probe, kargo, gomplate, zot, falcoctl, skopeo, apko, frp, dgraph, argo-workflows, fulcio, policy-controller, kubescape, step, tkn, vexctl, oauth2-proxy,...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: chartmuseum, falcoctl, eksctl, tekton-chains, ctop, zarf, docker-machine-driver-harvester, ko-fips, kots, flux, kubevela, cri-tools, scorecard, cadvisor-fips, k3s, kpt, buildkitd, timoni, rancher-machine, skopeo, pulumi, flux-image-reflector-controller,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: chartmuseum, falcoctl, eksctl, tekton-chains, ctop, zarf, docker-machine-driver-harvester, ko-fips, kots, flux, kubevela, cri-tools, scorecard, cadvisor-fips, k3s, kpt, buildkitd, timoni, rancher-machine, skopeo, pulumi, flux-image-reflector-controller,...
CVE-2024-21664 vulnerabilities
Vulnerabilities for packages: gitsign, minio, falcoctl, tekton-chains, kubescape, spire-server, vexctl, mc, boring-registry...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: flux-notification-controller, crossplane-provider-aws-cloudfront, crossplane-provider-aws-rds, tekton-chains, flux-image-automation-controller, rclone, wolfictl, zarf, crossplane-provider-aws, crossplane-provider-family-aws, flux-kustomize-controller,...
CVE-2023-49290 vulnerabilities
Vulnerabilities for packages: falcoctl, kubescape, cosign-fips, gitsign, tekton-chains, falcoctl-fips, vexctl...
CVE-2023-49290 vulnerabilities
Vulnerabilities for packages: gitsign, falcoctl, tekton-chains, kubescape, vexctl...
GHSA-VFP6-JRW2-99G9 vulnerabilities
Vulnerabilities for packages: tkn, kubescape, spire-server-fips, ko, spire-server, tekton-chains, policy-controller, slsa-verifier, aactl, falcoctl-fips, apko, cosign, flux-source-controller, skaffold, melange...
GHSA-VFP6-JRW2-99G9 vulnerabilities
Vulnerabilities for packages: aactl, cosign, skaffold, apko, ko, slsa-verifier, policy-controller, tekton-chains, kubescape, melange, tkn, spire-server, flux-source-controller...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Operator security update
An update is now available for OpenShift-Pipelines-1.11-RHEL-8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...