Skip to content
Weaveworks vulnerabilities
Newest
-
weave gitops terraform controller, weaveworks tf-controller +1 more
Information Disclosure Vulnerability in Weave GitOps Terraform Controller
CVE-2023-34236
Fix available
8.5 High
-
weave gitops, weaveworks weave-gitops +1 more
Weave Gitops Run vulnerable to insecure communication
CVE-2022-23509
Fix available
7.4 High
-
weave gitops, weaveworks weave-gitops +1 more
GitOps Run allows for Kubernetes workload injection
CVE-2022-23508
Fix available
8.9 High
-
weave gitops tools, weaveworks vscode-gitops-tools +1 more
Improper KubeConfig handling allows arbitrary code execution
CVE-2022-35976
5.2 Medium
-
weave gitops tools, weaveworks vscode-gitops-tools +1 more
Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode
CVE-2022-35975
9.0 Critical
-
weave gitops, weaveworks weave-gitops +1 more
Weave GitOps leaked cluster credentials into logs on connection errors
CVE-2022-31098
Fix available
9.0 Critical
-
weave
Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities
CVE-2020-26278
5.8 Medium
-
weave net, weaveworks weave +1 more
Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements
CVE-2020-11091
Fix available
5.8 Medium