Skip to content
OpenAdvisories

Package · Go

github.com/cert-manager/cert-manager

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.3

    cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

    cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.i…