114 matches found
CVE-2025-48938 vulnerabilities
Vulnerabilities for packages: wolfictl...
GHSA-G9F5-X53J-H563 vulnerabilities
Vulnerabilities for packages: wolfictl...
CVE-2024-35183
wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...
GHSA-CXFP-7PVR-95FF vulnerabilities
Vulnerabilities for packages: cg, zot, melange, wolfictl, k3s...
GHSA-55V3-XH23-96GH vulnerabilities
Vulnerabilities for packages: gh, wolfictl...
GHSA-XFHP-JF8P-MH5W vulnerabilities
Vulnerabilities for packages: conftest, kots, terragrunt, tfsec, k9s, snyk-cli, tflint, terraform, trivy, wolfictl, zarf, zot, grype, kubescape...
GHSA-XFHP-JF8P-MH5W vulnerabilities
Vulnerabilities for packages: trivy, terragrunt, zarf, zot, snyk-cli, grype, tfsec, kubescape, k9s, conftest-fips, terraform, trivy-fips, wolfictl, kots, tflint, conftest...
CVE-2024-6257 vulnerabilities
Vulnerabilities for packages: trivy, terragrunt, zarf, zot, snyk-cli, grype, tfsec, kubescape, k9s, conftest-fips, terraform, trivy-fips, wolfictl, kots, tflint, conftest...
GO-2024-2863 wolfictl leaks GitHub tokens to remote non-GitHub git servers in github.com/wolfi-dev/wolfictl
wolfictl leaks GitHub tokens to remote non-GitHub git servers in github.com/wolfi-dev/wolfictl...
GitHub Token Leakage
github.com/wolfi-dev/wolfictl is vulnerable to GitHub Token Leakage. The vulnerability is due to a local user's GitHub token being sent to remote servers other than github.com if a user ran wolfictl update with a non github domain...
CVE-2024-35183
wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...
CVE-2024-35183
CVE-2024-35183 affects wolfictl (Wolfi) and involves a git authentication issue in versions before 0.16.10. The vulnerability arises from a GetGitAuth flow that reads a GitHub token from the GITHUB_TOKEN environment variable and uses it for HTTP basic auth with go-git, in cases where the remote r...
CVE-2024-35183 wolfictl leaks GitHub tokens to remote non-GitHub git servers
wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...
CVE-2024-35183 wolfictl leaks GitHub tokens to remote non-GitHub git servers
wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...
CVE-2024-35183 wolfictl leaks GitHub tokens to remote non-GitHub git servers
wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHub token to be sent to remote servers other than github.com. Most git-dependent functionality in wolfictl relies on its own git package, which contains...
GHSA-8FG7-HP93-QHVR wolfictl leaks GitHub tokens to remote non-GitHub git servers
Summary A git authentication issue allows a local user’s GitHub token to be sent to remote servers other than github.com. Details Most git-dependent functionality in wolfictl relies on its own git package, which contains centralized logic for implementing interactions with git repositories. Some ...
wolfictl leaks GitHub tokens to remote non-GitHub git servers
Summary A git authentication issue allows a local user’s GitHub token to be sent to remote servers other than github.com. Details Most git-dependent functionality in wolfictl relies on its own git package, which contains centralized logic for implementing interactions with git repositories. Some ...
wolfictl 安全漏洞
wolfictl is a Wolfictl open source command line tool for use with Wolfi. A security vulnerability exists in Wolfictl versions prior to 0.16.10, which stems from a GitHub token that could be leaked to a remote non-GitHub git server...