- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 1 critical, 2 high
- Registry
- pkg.go.dev
Advisories 3
- CVE-2022-23509High 7.4
Weave Gitops Run vulnerable to insecure communication
Affected: fixed in 0.12.0.
- CVE-2022-23508High 8.9
GitOps Run allows for Kubernetes workload injection
Affected: fixed in 0.12.0.
- CVE-2022-31098Critical 9.0
Weave GitOps leaked cluster credentials into logs on connection errors
Affected: fixed in 0.8.1-rc.6.