Open Source Vulnerabilities

nodetaint

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal

nodetaint

vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to ...

nodetaint

half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass

nodetaint

security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by f...

opentofu, opentofu, opentofu, consul-k8s, consul-k8s, consul-k8s, trivy

Security fix for GHSA-vh4v-2xq2-g5cg applied in: opentofu 1.11.13-r1, opentofu 1.11.13-r2, opentofu 1.11.13-r3, consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, consul-k8s 2.0.1-r3, trivy 0.69.3-r3

nodetaint

This CVE affects only Windows worker nodes

wazuh-dashboard-dashboards-maps

wazuh-dashboard-dashboards-maps

opentofu, opentofu, opentofu, consul-k8s, consul-k8s, consul-k8s, trivy

oras-go is a Go library for managing OCI artifacts

nodetaint

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers

libsndfile

i2les_array function in pcm

trivy

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps

nodetaint

security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement

libsndfile

flac_buffer_copy function in flac

cosign-fips, cosign-fips, cosign-fips, trivy

sigstore-go is a Go library for Sigstore signing and verification

nodetaint

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec

libsndfile

flac_buffer_copy function in flac

nodetaint

In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secr...

libsndfile

flac_buffer_copy function in flac

consul-k8s, opentofu, opentofu, opentofu, consul-k8s, consul-k8s, consul-k8s, trivy

oras-go is a Go library for managing OCI artifacts

nodetaint

security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs

wazuh-dashboard-dashboards-reporting-fips

libsndfile

In libsndfile before 1

wazuh-dashboard-dashboards-reporting-fips

wazuh-dashboard-dashboards-reporting-fips

nodetaint

Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes

libsndfile

In libsndfile before 1

nodetaint

flaw was found in kube-controller-manager

libsndfile

In libsndfile before 1

nodetaint

security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes

libsndfile

Heap-based Buffer Overflow in the psf_binheader_writef function in common

nodetaint

security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes

libsndfile

stack-based buffer overflow in psf_memset in common

nodetaint

security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes

libsndfile

issue was discovered in libsndfile 1

libsndfile

issue was discovered in libsndfile 1

nodetaint

denial-of-service vulnerability exists in github

libsndfile

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

libsndfile

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

nodetaint

protojson

libsndfile

There is a heap-based buffer over-read at wav

libsndfile

It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav

libsndfile

libsndfile through 1

nodetaint

golang

nodetaint

Go before 1

nodetaint

attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing

nodetaint

malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption

nodetaint

In net/http in Go before 1

nodetaint

net/http in Go before 1

nodetaint

golang