Weaveworks
8 CVEs across 4 Weaveworks products. Browse Weaveworks vulnerabilities, severities, and proof-of-concept exploits.
Weaveworks products with known CVEs
Weaveworks CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-34236 | High | 8.5 | 2023-07-14 | Weave GitOps Terraform Controller (aka Weave TF-controller) is a controller for Flux to reconcile Terraform resources in a GitOps way. A vulnerability has been… |
CVE-2022-23509 | High | 7.3 | 2023-01-09 | Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps run has a l… |
CVE-2022-23508 | High | 8.8 | 2023-01-09 | Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability i… |
CVE-2022-35976 | Medium | 5.2 | 2022-08-18 | The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to arbitrary… |
CVE-2022-35975 | Critical | 9.0 | 2022-08-18 | The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the mac… |
CVE-2022-31098 | Critical | 9.0 | 2022-06-27 | Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in… |
CVE-2020-26278 | Medium | 5.8 | 2021-01-20 | Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts and enables their automatic discovery… |
CVE-2020-11091 | Medium | 5.8 | 2020-06-03 | In Weave Net before version 2.6.3, an attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert… |