Skip to content
OpenAdvisories

Vendor

weaveworks

8 known vulnerabilities.

Products

weave-gitops 3 vscode-gitops-tools 2 weave 2 tf-controller 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-35975

    Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode

    The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users using the VSCod…

    weaveworks vscode-gitops-tools
  • Critical 9.0
    CVE-2022-31098

    Weave GitOps leaked cluster credentials into logs on connection errors

    Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster …

    weaveworks weave-gitops github.com/weaveworks/weave-gitops Go