Cncf Spire vulnerabilities
- cncf spire In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issua… 6.8 Medium
- cncf spire Legacy Node API Allows Impersonation in github.com/spiffe/spire/pkg/server/endpoints/node 8.1 High