Security
فارسی
All products

github.com/stacklok/minder

Go · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Minder affected by denial of service from maliciously configured Git repositoryCVE-2024-37904 · GHSA-HPCG-XJQ5-G666Version ranges need review. github.com/stacklok/minder Go Medium Fix reported
Denial of service of Minder Server from maliciously crafted GitHub attestationsCVE-2024-35238 · GHSA-8FMJ-33GW-G7PWVersion ranges need review. github.com/stacklok/minder Go Medium Fix reported
Stacklok Minder vulnerable to denial of service from maliciously crafted templatesCVE-2024-35194 · GHSA-CRGC-2583-RW27Version ranges need review. github.com/stacklok/minder Go Medium Fix reported
Denial of service of Minder Server with attacker-controlled REST endpointCVE-2024-35185 · GHSA-FJW8-3GP8-4CVXVersion ranges need review. github.com/stacklok/minder Go Medium Fix reported
Minder's GitHub Webhook Handler vulnerable to DoS from un-validated requestsCVE-2024-34084 · GHSA-9C5W-9Q3F-3HV7Version ranges need review. github.com/stacklok/minder Go High Fix reported
Minder GetRepositoryByName data leakCVE-2024-31455 · GHSA-GGP5-28X4-XCJ9Version ranges need review. github.com/stacklok/minder Go Medium Fix reported
Minder trusts client-provided mapping from repo name to upstream IDCVE-2024-27093 · GHSA-Q6H8-4J2V-PJG4Version ranges need review. github.com/stacklok/minder Go Medium Fix reported
`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated userCVE-2024-27916 · GHSA-V627-69V2-XX37Version ranges need review. github.com/stacklok/minder Go High Fix reported