Weave vulnerabilities
We track 2 vulnerabilities in Weave products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2022.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Weave vulnerabilities
- 9.8 Critical severity
vscode-gitops-tools: Improper Neutralization of Special Elements used in an OS Command
The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to arbitrary code execution on behalf of the user running VSCode. Users relying on kubeconfigs that are generated
- 9.8 Critical severity
vscode-gitops-tools: Improper Neutralization of Special Elements used in an OS Command
The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users using the VSCode