argocd-image-updater

43 results · Clear filters · Feed

• High 7.5
  CVE-2025-21614

  go-git clients vulnerable to DoS via maliciously crafted Git server replies

  go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing spec…

  go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  Jan 6, 2025
• High 8.1
  CVE-2024-10220 Public exploit

  Arbitrary command execution through gitRepo volume

  The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.

  Kubernetes Kubelet kubeflow-pipelines-apiserver kubeflow-pipelines-frontend Debian Azure Linux Wolfi Go
  Nov 22, 2024
• High 7.7
  CVE-2024-0793

  Kube-controller-manager: malformed hpa v1 manifest causes crash

  A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.

  Red Hat Red Hat OpenShift Container Platform 4 Red Hat OpenShift Container Platform 4.12 argocd-image-updater Wolfi Go
  Nov 17, 2024