Skip to content
OpenAdvisories

Vendor

weaveworks

8 known vulnerabilities.

Products

weave-gitops 3 vscode-gitops-tools 2 weave 2 tf-controller 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.5
    CVE-2023-34236

    Information Disclosure Vulnerability in Weave GitOps Terraform Controller

    Weave GitOps Terraform Controller (aka Weave TF-controller) is a controller for Flux to reconcile Terraform resources in a GitOps way. A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker …

    weaveworks tf-controller github.com/weaveworks/tf-controller Go
  • High 7.4
    CVE-2022-23509

    Weave Gitops Run vulnerable to insecure communication

    Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps run has a local S3 bucket which it uses for synchronizing files that are later applied against a Kubernetes clu…

    weaveworks weave-gitops github.com/weaveworks/weave-gitops Go
  • High 8.9
    CVE-2022-23508

    GitOps Run allows for Kubernetes workload injection

    Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in GitOps run could allow a local user or process to alter a Kubernetes cluster's resources. GitOps ru…

    weaveworks weave-gitops github.com/weaveworks/weave-gitops Go