Skip to content
OpenAdvisories

Package · Go

github.com/weaveworks/weave-gitops

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.4
    CVE-2022-23509

    Weave Gitops Run vulnerable to insecure communication

    Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps run has a local S3 bucket which it uses for synchronizing files that are later applied against a Kubernetes clu…

    weaveworks weave-gitops github.com/weaveworks/weave-gitops Go
  • High 8.9
    CVE-2022-23508

    GitOps Run allows for Kubernetes workload injection

    Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in GitOps run could allow a local user or process to alter a Kubernetes cluster's resources. GitOps ru…

    weaveworks weave-gitops github.com/weaveworks/weave-gitops Go
  • Critical 9.0
    CVE-2022-31098

    Weave GitOps leaked cluster credentials into logs on connection errors

    Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster …

    weaveworks weave-gitops github.com/weaveworks/weave-gitops Go