321 matches found
GHSA-XCQ4-M2R3-CMRJ Trivy possibly leaks registry credential when scanning images from malicious registries
Impact If a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registr...
Trivy possibly leaks registry credential when scanning images from malicious registries
Impact If a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registr...
PT-2024-26372 · Docker +3 · Docker +3
Name of the Vulnerable Software and Affected Versions: Trivy versions prior to 0.51.2 Description: A malicious actor can trigger Trivy to leak credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registry AC...
Aqua Security Trivy 安全漏洞
Aqua Security Trivy is a comprehensive and versatile security scanner from Aqua Security. A security vulnerability exists in Aqua Security Trivy versions prior to 0.51.2, which stems from a potential leak of registry credentials when scanning images from a malicious registry...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: wire-go, jitsucom-bulker, mc-fips, cilium-fips, oauth2-proxy, sonobuoy, falcosidekick, k3d, opentelemetry-collector-contrib-fips, step, cert-exporter-fips, kaf, secrets-store-csi-driver-provider-aws, cortex, tekton-chains-fips, prometheus-alertmanager, dgraph,...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 Malicious code was discovered in the upstream ta...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 Malicious code was discovered in the upstream ta...
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: spire-server-fips, trivy, docker-compose, crossplane, cadvisor-fips, melange, tkn, buf, wolfictl, ctop, up, loki, grype, zot, ko, syft, kubescape, cadvisor, conftest-fips, dagger, conftest, buildkitd, spire-server, prometheus, aactl, kargo, cilium-cli, kaniko...
GHSA-MQ39-4GV4-MVPX vulnerabilities
Vulnerabilities for packages: spire-server-fips, trivy, docker-compose, crossplane, cadvisor-fips, melange, tkn, buf, wolfictl, ctop, up, loki, grype, zot, ko, syft, kubescape, cadvisor, conftest-fips, dagger, conftest, buildkitd, spire-server, prometheus, aactl, kargo, cilium-cli, kaniko...
openSUSE: Security Advisory for trivy (openSUSE-SU-2023:0064-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for trivy (openSUSE-SU-2022:10022-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for trivy (openSUSE-SU-2022:10081-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: trivy, helm-push, k8sgpt, zarf, k9s, up, zot, chartmuseum, flux-source-controller, kubescape, eksctl, flux-helm-controller, cilium-cli, kubevela, kots, helm-operator...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: eksctl, kubescape, kots, zot, flux-helm-controller, up, kubevela, trivy, zarf, flux-source-controller, helm-operator, helm-push, chartmuseum, cilium-cli, k9s, k8sgpt...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: trivy, helm-push, k8sgpt, zarf, k9s, up, zot, chartmuseum, flux-source-controller, kubescape, eksctl, flux-helm-controller, cilium-cli, kubevela, kots, helm-operator...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: trivy, gitsign, vexctl, k3s, slsa-verifier, zarf, k3d, ko-fips, cosign-fips, eksctl, helm-fips, docker-credential-gcr, skaffold, helm-operator, cadvisor-fips, falcoctl-fips, goreleaser, timoni, kpt, cri-tools, rancher-machine, pulumi, cosign, policy-controller-fips,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: trivy, gitsign, vexctl, k3s, slsa-verifier, zarf, k3d, ko-fips, cosign-fips, eksctl, helm-fips, docker-credential-gcr, skaffold, helm-operator, cadvisor-fips, falcoctl-fips, goreleaser, timoni, kpt, cri-tools, rancher-machine, pulumi, cosign, policy-controller-fips,...
GHSA-M3R6-H7WV-7XXV vulnerabilities
Vulnerabilities for packages: scorecard, guac, kubescape, zot, kaniko, trivy, docker, buildkitd, conftest, skaffold...