How many CVEs does stacklok minder have?

stacklok minder has 8 published CVE records since 2024.

How many stacklok minder CVEs are in CISA KEV?

None of stacklok minder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for stacklok minder vulnerabilities?

Yes — 3 of stacklok minder's CVEs have a known public exploit.

Which versions of stacklok minder are affected?

70 distinct stacklok minder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in stacklok minder CVEs?

stacklok minder's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-285 (Improper Authorization).

What is the average severity of stacklok minder CVEs?

The average CVSS base score across stacklok minder's scored CVEs is 6.0.

stacklok minder Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every stacklok minder version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.0.17 CVEs
0.0.107 CVEs
0.0.117 CVEs
0.0.127 CVEs
0.0.137 CVEs
0.0.147 CVEs
0.0.157 CVEs
0.0.167 CVEs
0.0.177 CVEs
0.0.187 CVEs
0.0.197 CVEs
0.0.27 CVEs
0.0.207 CVEs
0.0.217 CVEs
0.0.227 CVEs
0.0.237 CVEs
0.0.247 CVEs
0.0.257 CVEs
0.0.267 CVEs
0.0.277 CVEs
0.0.287 CVEs
0.0.297 CVEs
0.0.37 CVEs
0.0.307 CVEs
0.0.317 CVEs
0.0.327 CVEs
0.0.47 CVEs
0.0.57 CVEs
0.0.67 CVEs
0.0.77 CVEs
0.0.87 CVEs
0.0.97 CVEs
0.0.336 CVEs
0.0.346 CVEs
0.0.356 CVEs
0.0.366 CVEs
0.0.376 CVEs
0.0.386 CVEs
0.0.396 CVEs
0.0.405 CVEs
0.0.415 CVEs
0.0.425 CVEs
0.0.435 CVEs
0.0.445 CVEs
0.0.455 CVEs
0.0.465 CVEs
0.0.475 CVEs
0.0.484 CVEs
0.0.493 CVEs
0.0.502 CVEs
0.0.511 CVE

Version ranges

< 0.0.331 CVE
< 0.0.481 CVE
< 0.0.491 CVE
< 0.0.501 CVE
< 0.0.511 CVE
< 0.0.521 CVE
< 0.20240226.1425\+ref.53868a81 CVE
< 0.20240226.1425+ref.53868a81 CVE
0.0.39 <= v <= 0.0.391 CVE

Fixed in

0.0.331 CVE
0.0.481 CVE
0.0.491 CVE
0.20240226.1425\+ref.53868a81 CVE
006c6fa04075c8f269ade750116a4e17fc6da9d31 CVE
328e2a163c66d525733af3bff44e8e9a873faba61 CVE
476d161c02fbb7e8692e4025bbd788561339badf1 CVE
4a868e3ea1e3ade0b87b6e8142e66a26db7803611 CVE
db00a0f3affbe2d1cd91e133f4d0e05b570e0cc61 CVE
e475cb65c9a0642d6267099503a5d4c5a54cb12e1 CVE

Find a version

8 CVEs

Sort

Medium vulnerability · 2024-06-18
CVE-2024-37904
Patch
CWE-400
Medium · CVSS 5.7
EPSS 0.5% (37th pct)2024-06-18
Denial of service of Minder Server from maliciously crafted GitHub attestations
CVE-2024-35238
Patch
CWE-770
Medium · CVSS 5.3
EPSS 0.5% (42th pct)2024-05-27
Medium vulnerability · 2024-05-20
CVE-2024-35194
Patch
CWE-400
Medium · CVSS 5.3
EPSS 0.4% (34th pct)2024-05-20
Medium vulnerability · 2024-05-16
CVE-2024-35185
Patch
CWE-400
Medium · CVSS 5.3
EPSS 0.5% (38th pct)2024-05-16
High vulnerability · 2024-05-07
CVE-2024-34084
Public exploit
Patch
CWE-400
High · CVSS 7.5
EPSS 0.6% (45th pct)2024-05-07
Medium vulnerability · 2024-04-09
CVE-2024-31455
Patch
CWE-200
Medium · CVSS 4.3
EPSS 0.8% (52th pct)2024-04-09
High vulnerability · 2024-03-06
CVE-2024-27916
Public exploit
Patch
CWE-285
High · CVSS 7.1
EPSS 0.7% (48th pct)2024-03-06
Minder trusts client-provided mapping from repo name to upstream ID
CVE-2024-27093
Public exploit
Patch
CWE-20
High · CVSS 7.5
EPSS 0.6% (43th pct)2024-02-26

stacklok minder Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Other stacklok products

Frequently asked questions

References

Track stacklok minder vulnerabilities