Weave vulnerabilities

Products

• Gitops 3
• Gitops Tools 2

Newest

• weave desktop An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a... CVE-2024-25545 7.8 HighApril 12, 2024
• weave gitops terraform controller, weaveworks tf-controller +1 more Information Disclosure Vulnerability in Weave GitOps Terraform Controller CVE-2023-34236 Fix available 8.5 HighJuly 14, 2023
• weave gitops, weaveworks weave-gitops +1 more Weave Gitops Run vulnerable to insecure communication CVE-2022-23509 Fix available 7.4 HighJanuary 9, 2023
• weave gitops, weaveworks weave-gitops +1 more GitOps Run allows for Kubernetes workload injection CVE-2022-23508 Fix available 8.9 HighJanuary 9, 2023
• weave gitops tools, weaveworks vscode-gitops-tools +1 more Improper KubeConfig handling allows arbitrary code execution CVE-2022-35976 5.2 MediumAugust 18, 2022
• weave gitops tools, weaveworks vscode-gitops-tools +1 more Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode CVE-2022-35975 9.0 CriticalAugust 18, 2022
• weave gitops, weaveworks weave-gitops +1 more Weave GitOps leaked cluster credentials into logs on connection errors CVE-2022-31098 Fix available 9.0 CriticalJune 23, 2022
• weave Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities CVE-2020-26278 5.8 MediumJanuary 20, 2021
• weave cloud agent Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user.... CVE-2020-35464 9.8 CriticalDecember 15, 2020
• weave net, weaveworks weave +1 more Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements CVE-2020-11091 Fix available 5.8 MediumJune 3, 2020