pkg:Go/github.com/stacklok/minder

16 total CVEsHIGH4MEDIUM12

✅ Check your installed version

All known vulnerabilities

  • HIGH7.5CVE-2024-34084Denial of Service from untrusted requests in github.com/stacklok/minder
    from 0, < 0.0.48
  • HIGH7.5CVE-2024-34084Denial of Service from untrusted requests in github.com/stacklok/minder
    from 0, < 0.0.48
  • HIGH7.1CVE-2024-27916`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user
    from 0, < 0.0.33
  • HIGH7.1CVE-2024-27916`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user
    from 0, < 0.0.33
  • MEDIUM5.7CVE-2024-37904Minder affected by denial of service from maliciously configured Git repository in github.com/stacklok/minder
    from 0, < 0.0.52
  • MEDIUM5.7CVE-2024-37904Minder affected by denial of service from maliciously configured Git repository in github.com/stacklok/minder
    from 0, < 0.0.52
  • MEDIUM5.3CVE-2024-35238Denial of service of Minder Server from maliciously crafted GitHub attestations in github.com/stacklok/minder
    from 0, < 0.0.51
  • MEDIUM5.3CVE-2024-35238Denial of service of Minder Server from maliciously crafted GitHub attestations in github.com/stacklok/minder
    from 0, < 0.0.51
  • MEDIUM5.3CVE-2024-35194Stacklok Minder vulnerable to denial of service from maliciously crafted templates in github.com/stacklok/minder
    from 0, < 0.0.50
  • MEDIUM5.3CVE-2024-35194Stacklok Minder vulnerable to denial of service from maliciously crafted templates in github.com/stacklok/minder
    from 0, < 0.0.50
  • MEDIUM5.3CVE-2024-35185Denial of service of Minder Server with attacker-controlled REST endpoint in github.com/stacklok/minder
    from 0, < 0.0.49
  • MEDIUM5.3CVE-2024-35185Denial of service of Minder Server with attacker-controlled REST endpoint in github.com/stacklok/minder
    from 0, < 0.0.49
  • MEDIUM4.6CVE-2024-27093Minder trusts client-provided mapping from repo name to upstream ID
    from 0, < 0.20240226.1425
  • MEDIUM4.6CVE-2024-27093Minder trusts client-provided mapping from repo name to upstream ID
    from 0
  • MEDIUM4.3CVE-2024-31455Minder GetRepositoryByName data leak in github.com/stacklok/minder
    >= 0.0.39, < 0.0.40
  • MEDIUM4.3CVE-2024-31455Minder GetRepositoryByName data leak in github.com/stacklok/minder
    >= 0.0.39, < 0.0.40