CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2023-48795

The SSH transport protocol, including OpenSSH (before 9.6), is vulnerable to the Terrapin attack (CVE-2023-48795). This vulnerability allows remote attackers to bypass integrity checks during the handshake phase by exploiting how the SSH Binary Packet Protocol (BPP) handles sequence numbers. The ...

CVE-2021-3557

CVE-2021-3557 affects Argo CD: an unprivileged user can deploy Argo CD in their namespace and, via the ServiceAccount argocd-argocd-server, read all resources in the cluster including secrets, leading to potential data confidentiality breaches. The issue is characterized by a cluster-wide read ac...