Cncf vulnerabilities

Products

• Crossplane 2
• Spire 2

Newest

• cncf crossplane Crossplane vulnerable to possible image tampering from missing image validation for Packages CVE-2023-38495 Fix available 8.4 HighJuly 27, 2023
• cncf crossplane Crossplane vulnerable to denial of service from large image CVE-2023-37900 Fix available 3.4 LowJuly 27, 2023
• cncf spire In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issua… CVE-2021-27099 6.8 MediumMarch 5, 2021
• cncf spire Legacy Node API Allows Impersonation in github.com/spiffe/spire/pkg/server/endpoints/node CVE-2021-27098 Fix available 8.1 HighMarch 5, 2021
• cncf portmap, kubernetes, netapp cloud insights +2 more Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network... CVE-2019-9946 Fix available 7.5 HighApril 2, 2019