Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: artifacthub Component: Hub Clear all filters
TI-2023-24583 CVE-2023-45823 · GHSA-hmq4-c2r4-5q8h

Arbitrary file read in Artifact Hub

Priority MEDIUM 40

Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00754 Published 2023-10-19 Fixed in 1.16.0 CWE-22
TI-2023-24582 CVE-2023-45822 · GHSA-9pc8-m4vp-ggvf

Unsafe rego built-in allowed in Artifact Hub

Priority LOW 25

Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0064 Published 2023-10-19 Fixed in 1.16.0 CWE-918
TI-2023-24581 CVE-2023-45821 · GHSA-g6pq-x539-7w4j

Incorrect Docker Hub registry check in Artifact Hub

Priority LOW 28

Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00243 Published 2023-10-19 Fixed in 1.16.0 CWE-494