What’s Vulnerable › Products

stacklok minder vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your stacklok minder version is affected

Latest stacklok minder vulnerabilities

• CVE-2024-37904 — Denial of service from maliciously configured Git repository in Minder (CVSS 5.7)
• CVE-2024-35238 — Denial of service of Minder Server from maliciously crafted GitHub attestations (CVSS 5.3)
• CVE-2024-35194 — Stacklok Minder vulnerable to denial of service from maliciously crafted templates (CVSS 5.3)
• CVE-2024-31455 — Minder GetRepositoryByName data leak (CVSS 4.3)
• CVE-2024-27916 — `GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user (CVSS 4.3)
• CVE-2024-27093 — Minder trusts client-provided mapping from repo name to upstream ID (CVSS 7.5)