GHSA-W5WX-6G2R-R78Q Nuclei allows unsigned code template execution through workflows

Overview A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing custom workflows, potentially allowing the execution of malicious code on the user's system. This...

Nuclei allows unsigned code template execution through workflows

Overview A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing custom workflows, potentially allowing the execution of malicious code on the user's system. This...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: melange, kubernetes-dashboard, wolfictl, caddy, temporal-ui-server, frp, tkn, guac, minio, grpc-health-probe, rekor, goreleaser, fulcio, spire-server, sigstore-scaffolding, kubescape, falcoctl, flux-kustomize-controller, step, timestamp-authority, cosign, aactl,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: src, caddy, argo-workflows-fips, falcosidekick-fips, trillian-fips, step-ca, temporal-server-fips, kube-bench-fips, wavefront-collector-for-kubernetes, kube-bench, ferretdb, amass, k3s, temporal-server, kine, kots, trillian, argo-workflows, spicedb, step, caddy-fips...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: step, ferretdb, caddy, amass, argo-workflows, step-ca, kube-bench, temporal-server, kots, k3s, spicedb, trillian, src, kine...

CVE-2024-27289 vulnerabilities

Vulnerabilities for packages: step, caddy, argo-workflows, step-ca, kots, trillian...

BIT-ARGO-WORKFLOWS-2021-37914

In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...

BIT-ARGO-WORKFLOWS-2022-29164 Privilege Escalation in argo-workflows

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, helm-operator, melange, pulumi-language-java, ferretdb, amass, kwok, helm-push, metrics-server, nfs-subdir-external-provisioner, cert-exporter, external-dns, rekor, falcoctl, flux-kustomize-controller, crossplane-provider-aws-rds, golangci-lint,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubevela, kubernetes-dashboard, step-ca, crossplane-provider-azure-storage, slsa-verifier, velero, kubernetes-dashboard-metrics-scraper-fips, temporal, prometheus-operator, terraform, prometheus-postgres-exporter, prometheus-node-exporter, skopeo,...

Lessons from video game companies: automation unleashes robust monitoring & observability

Video game organizations need robust monitoring and observability solutions to stay one step ahead of cyber adversaries. Chances are, so do we all. In this blog post, we’ll delve into how monitoring and observability capabilities enable video game organizations to bolster their cybersecurity...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: step, ferretdb, caddy, amass, argo-workflows, step-ca, kube-bench, temporal-server, kots, k3s, spicedb, trillian, src, kine...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: src, caddy, argo-workflows-fips, falcosidekick-fips, trillian-fips, step-ca, temporal-server-fips, kube-bench-fips, wavefront-collector-for-kubernetes, kube-bench, ferretdb, amass, k3s, temporal-server, kine, kots, trillian, argo-workflows, spicedb, step, caddy-fips...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: src, caddy, argo-workflows-fips, falcosidekick-fips, trillian-fips, step-ca, temporal-server-fips, kube-bench-fips, wavefront-collector-for-kubernetes, kube-bench, ferretdb, amass, k3s, temporal-server, kine, kots, trillian, argo-workflows, spicedb, step, caddy-fips...

GHSA-M7WR-2XF7-CM9P vulnerabilities

Vulnerabilities for packages: trillian, caddy, argo-workflows, wavefront-collector-for-kubernetes, argo-workflows-fips, trillian-fips, step-ca, kots, caddy-fips, step...

6 Ways to Simplify SaaS Identity Governance

With SaaS applications now making up the vast majority of technology used by employees in most organizations, tasks related to identity governance need to happen across a myriad of individual SaaS apps. This presents a huge challenge for centralized IT teams who are ultimately held responsible fo...

CVE-2024-1482 Improper Authorization in GitHub Enterprise Server allowed unauthorized workflow execution

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create new branches in public repositories and run arbitrary GitHub Actions workflows with permissions from the GITHUBTOKEN. To exploit this vulnerability, an attacker would need access...

Argus - A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions

This repo contains the code for our USENIX Security '23 paper "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions". Argus is a comprehensive security analysis tool specifically designed for GitHub Actions. Built with an aim to enhance the security of CI/CD...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: helm-fips, kubescape, kubevela, nerdctl, argo-workflows-fips, ctop, guac, tekton-chains, helm-operator-fips, falcoctl, cosign, helm-operator, kubeflow-katib, newrelic-infrastructure-agent, rancher-machine, zot, docker-machine-driver-harvester, kargo,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: helm-fips, kubescape, kubevela, nerdctl, argo-workflows-fips, ctop, guac, tekton-chains, helm-operator-fips, falcoctl, cosign, helm-operator, kubeflow-katib, newrelic-infrastructure-agent, rancher-machine, zot, docker-machine-driver-harvester, kargo,...