Skip to content
OpenAdvisories

Package · Go

github.com/weaveworks/weave-gitops

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2022-23509

    Weave Gitops Run vulnerable to insecure communication

    Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps run has a local S3 bucket which it uses for synchronizing files that are later applied against a Kubernetes clu…

    weaveworks weave-gitops github.com/weaveworks/weave-gitops Go
  • High 8.9
    CVE-2022-23508

    GitOps Run allows for Kubernetes workload injection

    Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in GitOps run could allow a local user or process to alter a Kubernetes cluster's resources. GitOps ru…

    weaveworks weave-gitops github.com/weaveworks/weave-gitops Go