Weave

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Weave records in CISA KEV

No Weave vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Weave Gitops · all components

TI-2022-13142 CVE-2022-31098 · GHSA-xggc-qprg-x6mw

MEDIUM 43

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01261 Published 2022-06-27 Fixed in 0.8.1-rc.6 CWE-532

TI-2022-07567 CVE-2022-23508 · GHSA-wr3c-g326-486c

MEDIUM 40

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise.

CVSS 3.1HIGH 8.9 Adjacent network No auth User interaction EPSS 0.00333 Published 2023-01-09 Fixed in 0.12.0 CWE-284

TI-2022-07568 CVE-2022-23509 · GHSA-89qm-wcmw-3mgg

LOW 34

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise.

CVSS 3.1HIGH 7.4 Adjacent network High privileges User interaction EPSS 0.0025 Published 2023-01-09 Fixed in 0.12.0 CWE-200