weaveworks vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20211
3. 20223
4. 20233

Newest CVEs

• CVE-2023-34236

  Information Disclosure Vulnerability in Weave GitOps Terraform Controller

  weaveworks · tf-controller

  High8.5
• CVE-2022-23509

  Weave Gitops Run vulnerable to insecure communication

  weaveworks · weave-gitops

  High7.4
• CVE-2022-23508

  GitOps Run allows for Kubernetes workload injection

  weaveworks · weave-gitops

  High8.9
• CVE-2022-35976

  Improper KubeConfig handling allows arbitrary code execution

  weaveworks · vscode-gitops-tools

  Medium5.2
• CVE-2022-35975

  Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode

  weaveworks · vscode-gitops-tools

  Critical9.0
• CVE-2022-31098

  Weave GitOps leaked cluster credentials into logs on connection errors

  weaveworks · weave-gitops

  Critical9.0
• CVE-2020-26278

  Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities

  weaveworks · weave

  Medium5.8
• CVE-2020-11091

  Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements

  weaveworks · Weave

  Medium5.8