CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: slsa-verifier, aactl, kubescape, goreleaser, zarf, neuvector-sigstore-interface, ko, falcoctl, melange, gitsign, policy-controller-fips, flux-source-controller, ko-fips, falcoctl-fips, zot, spire-server-fips, wolfictl, tekton-chains-fips, tkn-fips, policy-controller,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: crossplane, aactl, kubescape, buf, ctop, conftest-fips, ko, cilium-cli, cadvisor-fips, loki, kargo, dagger, docker-compose, kaniko, melange, zot, spire-server-fips, buildkitd, wolfictl, trivy, conftest, up, prometheus, spire-server, syft, cadvisor, grype, tkn...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: crossplane, aactl, kubescape, buf, ctop, conftest-fips, ko, cilium-cli, cadvisor-fips, loki, kargo, dagger, docker-compose, kaniko, melange, zot, spire-server-fips, buildkitd, wolfictl, trivy, conftest, up, prometheus, spire-server, syft, cadvisor, grype, tkn...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kwok, cass-operator, secrets-store-csi-driver-provider-aws, gomplate, crossplane-provider-azure-managedidentity, kine, crossplane-provider-aws-cloudwatchlogs, flux-image-reflector-controller, flux-notification-controller, kyverno-policy-reporter, aws-flb-kinesis,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, kine, tflint, cfssl, aws-flb-kinesis-fips, kubernetes-dashboard, prometheus-beat-exporter, flux-kustomize-controller, volume-modifier-for-k8s, kyverno-policy-reporter, protoc-gen-go-grpc, certificate-transparency-fips,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: slsa-verifier, crossplane-provider-aws-memorydb, crossplane, crossplane-provider-aws-ec2, pulumi-language-dotnet, rclone, sops, aactl, kubescape, goreleaser, zarf, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudformation, gitness,...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update

Red Hat OpenShift Pipelines Client tkn for 1.10.6 has been released. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

MAL-2023-8495 Malicious code in tkn-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3230b2e14e4f5e50ae022fdb7a081a52260e3c68f1a4b50add1dcca4afdc1a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tkn-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3230b2e14e4f5e50ae022fdb7a081a52260e3c68f1a4b50add1dcca4afdc1a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: slsa-verifier, ko, melange, tekton-chains, flux-source-controller, falcoctl-fips, apko, aactl, kubescape, spire-server, spire-server-fips, cosign, policy-controller, skaffold, tkn...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: ko, kubescape, tkn, slsa-verifier, policy-controller, cosign, spire-server, aactl, melange, skaffold, flux-source-controller, tekton-chains, apko...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: ko, kubescape, tkn, slsa-verifier, policy-controller, cosign, spire-server, aactl, melange, skaffold, flux-source-controller, tekton-chains, apko...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: slsa-verifier, ko, melange, tekton-chains, flux-source-controller, falcoctl-fips, apko, aactl, kubescape, spire-server, spire-server-fips, cosign, policy-controller, skaffold, tkn...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update

Red Hat OpenShift Pipelines Client tkn for 1.12.1 has been released. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Hewlett Packard Enterprise System Management Homepage SSO TKN Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise System Management Homepage. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of /proxy/sso requests. When parsin...