Security Advisories

medium2021-05-24

CVE-2020-26213-Denial-of-Service within Docker container

kitabisa/teler · GHSA-jhj6-5mh6-4pvf

medium2021-05-24

CVE-2020-15233-OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses

View chart

ory/fosite · GHSA-rfq3-w54c-f9q5

medium2021-05-24

CVE-2020-15234-Redirect URL matching ignores character casing

View chart

ory/fosite · GHSA-grfp-q2mm-hfp6

critical2021-05-24

Signature Validation Bypass

View chart

russellhaering/gosaml2 · GHSA-5684-g483-2249

critical2021-05-24

Signature Validation Bypass

View chart

russellhaering/goxmldsig · GHSA-rrfw-hg9m-j47h

medium2021-05-24

CVE-2020-13794-Authenticated users can exploit an enumeration vulnerability in Harbor

View chart

goharbor/harbor · GHSA-q9p8-33wc-h432

high2021-05-24

CVE-2020-15222-Token reuse in Ory fosite

View chart

ory/fosite · GHSA-v3q9-2p3m-7g43

low2021-05-24

CVE-2020-15187-plugin.yaml file allows for duplicate entries in helm

View chart

helm/helm · GHSA-c52f-pq47-2r9j

low2021-05-24

CVE-2020-15186-Improper Sanitizing of plugin names in helm

View chart

helm/helm · GHSA-m54r-vrmv-hw33

low2021-05-24

CVE-2020-15184-Aliases are never checked in helm

View chart

helm/helm · GHSA-9vp5-m38w-j776

high2021-05-24

CVE-2020-24356-Local Privilege Escalation in cloudflared

View chart

cloudflare/cloudflared · GHSA-hgwp-4vp4-qmm2

high2021-05-21

CVE-2020-11971-Improper Input Validation in Apache Camel

View chart

apache/camel · GHSA-hfg5-xpvw-c9x4

low2021-05-21

CVE-2021-4238-RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be

View chart

masterminds/goutils · GHSA-xg2h-wx96-xgxr

high2021-05-21

github.com/nats-io/nats-server Import token permissions checking not enforced

View chart

nats-io/nats-server · GHSA-j756-f273-xhp4

high2021-05-21

Nil dereference in NATS JWT causing DoS of nats-server

View chart

nats-io/nats-server · GHSA-hmm9-r2m2-qg9w

high2021-05-21

Incorrect handling of credential expiry by /nats-io/nats-server

View chart

nats-io/nats-server · GHSA-2c64-vj8g-vwrq

medium2021-05-21

Helm OCI credentials leaked into Argo CD logs

View chart

argoproj/argo-cd · GHSA-6w87-g839-9wv7

low2021-05-21

CVE-2021-29619-Segfault in `tf.raw_ops.SparseCountSparseOutput`

View chart

tensorflow/tensorflow · GHSA-wvjw-p9f5-vq28

low2021-05-21

CVE-2021-29618-Crash in `tf.transpose` with complex inputs

View chart

tensorflow/tensorflow · GHSA-xqfj-cr6q-pc8w

low2021-05-21

CVE-2021-29617-Crash in `tf.strings.substr` due to `CHECK`-fail

View chart

tensorflow/tensorflow · GHSA-mmq6-q8r3-48fm