Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Crossplane
CRITICAL 9.8
CVE-2023-38495
Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, Cr…
Fix: 1.11.5 / 1.12.3+
Fix from $2,300
2023-07-27
Spire
MEDIUM 6.8
CVE-2021-27099
In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the age…
Fix: 0.8.5 / 0.9.4+
Fix from $1,600
2021-03-05
Spire
HIGH 8.1
CVE-2021-27098
In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Serve…
Fix: 0.9.4 / 0.10.2+
Fix from $1,950
2021-03-05
Envoy
MEDIUM 5.3
CVE-2020-8664
CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret (e.g. trusted CA) acros…
Fix: after 1.13.0
Fix from $1,600
2020-03-04