Login Request a demo
MI
Product
minder
by stacklok · last CVE Jun 18, 2024
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 2Medium 6Low 0
Severity
All severities8Critical0High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add minder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-34084
7.5
1%
May 7
Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests
Affected: < 0.0.48
CVE-2024-27093
7.5
1%
Feb 26
Minder trusts client-provided mapping from repo name to upstream ID
Affected: < 0.20240226.1425+ref.53868a8
CVE-2024-37904
5.7
0%
Jun 18
Denial of service from maliciously configured Git repository in Minder
Affected: < 0.0.52
CVE-2024-35238
5.3
1%
May 27
Denial of service of Minder Server from maliciously crafted GitHub attestations
Affected: < 0.0.51
CVE-2024-35194
5.3
0%
May 20
Stacklok Minder vulnerable to denial of service from maliciously crafted templates
Affected: < 0.0.50
CVE-2024-35185
5.3
0%
May 16
Denial of service of Minder Server with attacker-controlled REST endpoint
Affected: < 0.0.49
CVE-2024-31455
4.3
1%
Apr 9
Minder GetRepositoryByName data leak
Affected: = 0.0.39
CVE-2024-27916
4.3
1%
Mar 6
`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user
Affected: < 0.0.33
Showing 8