Open Source Vulnerabilities
gcp-compute-persistent-disk-csi-driver-1.16
gcp-compute-persistent-disk-csi-driver-1.16
crossplane-provider-azure-storagecache
cloud-provider-azure-cloud-controller-manager-fips-1.35
calico-whisker-backend-3.32, calico-whisker-backend-3.32
crossplane-provider-aws-sns, crossplane-provider-aws-sns
knative-serving-fips-1.20-controller
tekton-pipelines-entrypoint-fips-1.11
kubeflow-pipelines-persistence_agent, kubeflow-pipelines-persistence_agent
kubeflow-pipelines-persistence_agent/ kubeflow-pipelines-persistence_agent
knowns before 0.30.0 Path Traversal via Document API
Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy
Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy
Snipe-IT 8.6.3 Broken Access Control via Kit Update Endpoints
terraform-provider-azuread, terraform-provider-azuread
Snipe-IT 8.6.3 Stored XSS via Department Names
Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num
Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num
Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation
Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation
Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout
Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout
Snipe-IT before 8.7.0 Improper Input Validation via API Checkout
Snipe-IT before 8.7.0 Improper Input Validation via API Checkout
Snipe-IT before 8.7.0 Cross-Company Read via requested-assets
kubernetes-csi-external-resizer-fips
Snipe-IT 8.6.3 Race Condition via Consumable Checkout
Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint
Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components
Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components
cloud-provider-aws-1.35-cloud-controller-manager, cloud-provider-aws-1.35-cloud-controller-manager
cloud-provider-aws-1.35-cloud-controller-manager/ cloud-provider-aws-1.35-cloud-controller-manager
snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer
snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer
Snipe-IT before 8.7.0 Authentication Bypass via API Middleware
Snipe-IT before 8.7.0 Authentication Bypass via API Middleware
snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints
snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints
snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag
snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag
