CVE-2025-48938 vulnerabilities

Vulnerabilities for packages: wolfictl...

CVE-2025-48938 vulnerabilities

Vulnerabilities for packages: wolfictl...

GHSA-G9F5-X53J-H563 vulnerabilities

Vulnerabilities for packages: wolfictl...

CVE-2024-35183

wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...

GHSA-CXFP-7PVR-95FF vulnerabilities

Vulnerabilities for packages: cg, wolfictl, k3s, zot, melange...

GHSA-55V3-XH23-96GH vulnerabilities

Vulnerabilities for packages: gh, wolfictl...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: k9s, trivy-fips, snyk-cli, tflint, tfsec, trivy, terraform, zarf, conftest-fips, wolfictl, kots, grype, conftest, terragrunt, kubescape, zot...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: k9s, tfsec, snyk-cli, grype, conftest, kots, terraform, wolfictl, tflint, zarf, zot, kubescape, terragrunt, trivy...

CVE-2024-6257 vulnerabilities

Vulnerabilities for packages: k9s, trivy-fips, snyk-cli, tflint, tfsec, trivy, terraform, zarf, conftest-fips, wolfictl, kots, grype, conftest, terragrunt, kubescape, zot...

GO-2024-2863 wolfictl leaks GitHub tokens to remote non-GitHub git servers in github.com/wolfi-dev/wolfictl

wolfictl leaks GitHub tokens to remote non-GitHub git servers in github.com/wolfi-dev/wolfictl...

GitHub Token Leakage

github.com/wolfi-dev/wolfictl is vulnerable to GitHub Token Leakage. The vulnerability is due to a local user's GitHub token being sent to remote servers other than github.com if a user ran wolfictl update with a non github domain...

CVE-2024-35183

wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...

CVE-2024-35183

CVE-2024-35183 affects wolfictl (Wolfi) and involves a git authentication issue in versions before 0.16.10. The vulnerability arises from a GetGitAuth flow that reads a GitHub token from the GITHUB_TOKEN environment variable and uses it for HTTP basic auth with go-git, in cases where the remote r...

CVE-2024-35183 wolfictl leaks GitHub tokens to remote non-GitHub git servers

wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...

CVE-2024-35183 wolfictl leaks GitHub tokens to remote non-GitHub git servers

wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...

CVE-2024-35183 wolfictl leaks GitHub tokens to remote non-GitHub git servers

wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...

GHSA-8FG7-HP93-QHVR wolfictl leaks GitHub tokens to remote non-GitHub git servers

Summary A git authentication issue allows a local user’s GitHub token to be sent to remote servers other than github.com. Details Most git-dependent functionality in wolfictl relies on its own git package, which contains centralized logic for implementing interactions with git repositories. Some ...

wolfictl leaks GitHub tokens to remote non-GitHub git servers

Summary A git authentication issue allows a local user’s GitHub token to be sent to remote servers other than github.com. Details Most git-dependent functionality in wolfictl relies on its own git package, which contains centralized logic for implementing interactions with git repositories. Some ...

wolfictl 安全漏洞

wolfictl is a Wolfictl open source command line tool for use with Wolfi. A security vulnerability exists in Wolfictl versions prior to 0.16.10, which stems from a GitHub token that could be leaked to a remote non-GitHub git server...

CVE-2024-35183: Files or Directories Accessible to External Parties

wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...