Open Source Vulnerabilities

Cross-site Scripting (XSS) - Stored in librenms/librenms

Missing Authorization in librenms/librenms

Improper Authorization in librenms/librenms

unbound

Security update for unbound

github.com/kubernetes/kubernetes

Access Restriction Bypass in kubernetes

github.com/containernetworking/cni

containernetworking/cni improper limitation of path name

k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

Server Side Request Forgery (SSRF) in Kubernetes

github.com/facebook/fbthrift

Improper Input Validation and Excessive Iteration in Go Facebook Thrift

k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

Kubernetes Arbitrary Command Injection

go.etcd.io/etcd

DNS Rebinding in etcd

github.com/docker/docker-ce

Improper Input Validation in Docker Engine

github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2

Denial of service in github.com/nats-io/nats-server/server

github.com/nats-io/jwt/v2, github.com/nats-io/nats-server/v2, github.com/nats-io/jwt

Duplicate Advisory: Incorrect Access Control in github.com/nats-io/jwt and github.com/nats-io/nats-server/v2

github.com/docker/docker

Arbitrary Code Execution

github.com/docker/docker

Man-in-the-Middle (MitM)

k8s.io/apiserver, k8s.io/apiserver, k8s.io/apiserver

Kubernetes API Server DoS Via API Requests

github.com/mholt/archiver

Arbitrary File Write via Archive Extraction in mholt/archiver

github.com/kubernetes/kubernetes, github.com/kubernetes/kubernetes, github.com/kubernetes/kubernetes

Privilege Escalation in Kubernetes

k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

Symlink Attack in kubectl cp

k8s.io/client-go

Kubernetes Unsafe Cacheing

github.com/docker/docker

Access Restriction Bypass in Docker

github.com/concourse/concourse

Pivotal Concourse SQL Injection Vulnerability

github.com/github/git-sizer

On Windows, `git-sizer` might run a `git` executable within the repository being analyzed

sigs.k8s.io/secrets-store-csi-driver

Directory traversal in Kubernetes Secrets Store CSI Driver

go.etcd.io/etcd/v3

etcd Cross-site Request Forgery (CSRF)

github.com/hashicorp/nomad, github.com/hashicorp/nomad, github.com/hashicorp/nomad

Path Traversal in HashiCorp Nomad

github.com/kata-containers/agent, github.com/kata-containers/agent, github.com/kata-containers/agent, github.com/kata-containers/runtime, github.com/kata-containers/runtime, github.com/kata-containers/runtime

Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers

istio.io/istio

Istio may not check inbound TCP connections against istio-policy

github.com/hashicorp/nomad

Hashicorp Nomad Information Exposure Through Environmental Variables

org.postgresql:postgresql

Untrusted Search Path in PostgreSQL

github.com/hashicorp/nomad, github.com/hashicorp/nomad, github.com/hashicorp/nomad

Use After Free in HashiCorp Nomad

istio.io/istio, istio.io/istio

Authorization bypass in Istio

github.com/containers/image

containers/image library Insufficiently Protects Credentials

github.com/kata-containers/runtime, github.com/kata-containers/runtime, github.com/kata-containers/runtime

Link Following in Kata Runtime

github.com/docker/docker

Information Exposure in Docker Engine

github.com/go-vela/server

Reject unauthorized access with GitHub PATs

github.com/Yubico/yubihsm-connector

Infinite loop in Yubico yubihsm-connector

github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint

github.com/concourse/concourse, github.com/concourse/concourse, github.com/concourse/concourse

Pivotal Concourse Open Redirect in Login Flow

github.com/elastic/beats, github.com/elastic/beats

Denial of Service in Packetbeat

github.com/goharbor/harbor

Missing Authorization in Harbor

github.com/go-gitea/gitea

Gitea Exposes Private Email Addresses

github.com/hashicorp/vault-ssh-helper

Improper Input Validation in vault-ssh-helper

github.com/docker/docker

Arbitrary File Write in Libcontainer

github.com/couchbase/sync_gateway

SQL Injection in Couchbase Sync Gateway