stacklok/minder Security Advisories | GitStock

medium2024-06-18

Minder affected by denial of service from maliciously configured Git repository

GHSA-hpcg-xjq5-g666 · CVE-2024-37904

medium2024-05-28

Denial of service of Minder Server from maliciously crafted GitHub attestations

GHSA-8fmj-33gw-g7pw · CVE-2024-35238

medium2024-05-20

Stacklok Minder vulnerable to denial of service from maliciously crafted templates

GHSA-crgc-2583-rw27 · CVE-2024-35194

medium2024-05-16

Denial of service of Minder Server with attacker-controlled REST endpoint

GHSA-fjw8-3gp8-4cvx · CVE-2024-35185

high2024-05-07

Minder's GitHub Webhook Handler vulnerable to DoS from un-validated requests

GHSA-9c5w-9q3f-3hv7 · CVE-2024-34084

medium2024-04-09

Minder GetRepositoryByName data leak

GHSA-ggp5-28x4-xcj9 · CVE-2024-31455

high2024-03-05

`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user

GHSA-v627-69v2-xx37 · CVE-2024-27916

medium2024-02-26

Minder trusts client-provided mapping from repo name to upstream ID

GHSA-q6h8-4j2v-pjg4 · CVE-2024-27093