weaveworks vulnerabilities
8 published CVEs name weaveworks among the affected products.
- 8Published CVEs8 of them scored
- 0Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-34236
Information Disclosure Vulnerability in Weave GitOps Terraform Controller
weaveworks · tf-controller
High8.5 - CVE-2022-23509
Weave Gitops Run vulnerable to insecure communication
weaveworks · weave-gitops
High7.4 - CVE-2022-23508
GitOps Run allows for Kubernetes workload injection
weaveworks · weave-gitops
High8.9 - CVE-2022-35976
Improper KubeConfig handling allows arbitrary code execution
weaveworks · vscode-gitops-tools
Medium5.2 - CVE-2022-35975
Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode
weaveworks · vscode-gitops-tools
Critical9.0 - CVE-2022-31098
Weave GitOps leaked cluster credentials into logs on connection errors
weaveworks · weave-gitops
Critical9.0 - CVE-2020-26278
Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities
weaveworks · weave
Medium5.8 - CVE-2020-11091
Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements
weaveworks · Weave
Medium5.8