Stacklok Minder vulnerabilities
- mindersec minder Denial of service from maliciously configured Git repository in Minder 5.7 Medium
- mindersec minder Denial of service of Minder Server from maliciously crafted GitHub attestations 5.3 Medium
- mindersec minder Stacklok Minder vulnerable to denial of service from maliciously crafted templates 5.3 Medium
- mindersec minder Denial of service of Minder Server with attacker-controlled REST endpoint 5.3 Medium
- mindersec minder Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests 7.5 High
- mindersec minder Minder GetRepositoryByName data leak 4.3 Medium
- lfprojects minder `GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user 7.1 High
- lfprojects minder Minder trusts client-provided mapping from repo name to upstream ID 4.6 Medium