stacklok minder vulnerabilities
8 published CVEs name stacklok minder among the affected products.
- 8Published CVEs8 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-37904
Denial of service from maliciously configured Git repository in Minder
stacklok · minder
Medium5.7 - CVE-2024-35238
Denial of service of Minder Server from maliciously crafted GitHub attestations
stacklok · minder
Medium5.3 - CVE-2024-35194
Stacklok Minder vulnerable to denial of service from maliciously crafted templates
stacklok · minder
Medium5.3 - CVE-2024-35185
Denial of service of Minder Server with attacker-controlled REST endpoint
stacklok · minder
Medium5.3 - CVE-2024-34084
Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests
stacklok · minder
High7.5 - CVE-2024-31455
Minder GetRepositoryByName data leak
stacklok · minder
Medium4.3 - CVE-2024-27916
`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user
stacklok · minder
High7.1 - CVE-2024-27093
Minder trusts client-provided mapping from repo name to upstream ID
stacklok · minder
Medium4.6