stacklok minder vulnerabilities
8 published CVEs name stacklok minder among the affected products.
- Published CVEs
- 8
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 6Low 0Not scored 0
Newest CVEs
- CVE-2024-37904
Denial of service from maliciously configured Git repository in Minder
stacklok · minder
Medium5.7 - CVE-2024-35238
Denial of service of Minder Server from maliciously crafted GitHub attestations
stacklok · minder
Medium5.3 - CVE-2024-35194
Stacklok Minder vulnerable to denial of service from maliciously crafted templates
stacklok · minder
Medium5.3 - CVE-2024-35185
Denial of service of Minder Server with attacker-controlled REST endpoint
stacklok · minder
Medium5.3 - CVE-2024-34084
Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests
stacklok · minder
High7.5 - CVE-2024-31455
Minder GetRepositoryByName data leak
stacklok · minder
Medium4.3 - CVE-2024-27916
`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user
stacklok · minder
High7.1 - CVE-2024-27093
Minder trusts client-provided mapping from repo name to upstream ID
stacklok · minder
Medium4.6