weave-gitops vulnerabilities

2 known vulnerabilities in weave-gitops from Weaveworks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  weave-gitops: Files or Directories Accessible to External Parties

  CVE-2022-23508Jan 9, 2023Weaveworks

  Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in GitOps run could allow a local user or process to alter a Kubernetes cluster's resources. GitOps run

• 7.5 High severity

  weave-gitops: Insertion of Sensitive Information into Log File

  CVE-2022-31098Jun 27, 2022WeaveworksEPSS 1.26%

  Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster c