CN
Vendor
Cncf
5
CVEs
0
On KEV
0
New 30D
Products
CR9.8
Crossplane
Cncf
2 CVEs0 on KEV0 new
SP8.1
Spire
Cncf
2 CVEs0 on KEV0 new
PO7.5
Portmap
Cncf
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-38495 | CR Crossplane Cncf | 9.8 | Jul 27 | Crossplane is a framework for building cloud native control planes without needing to write code |
| CVE-2023-37900 | CR Crossplane Cncf | 2.7 | Jul 27 | Crossplane is a framework for building cloud native control planes without needing to write code |
| CVE-2021-27099 | SP Spire Cncf | 6.8 | Mar 5 | In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature,… |
| CVE-2021-27098 | SP Spire Cncf | 8.1 | Mar 5 | In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result… |
| CVE-2019-9946 | PO Portmap Cncf | 7.5 | Apr 2 | Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes |