Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-3996
5.5
MEDIUMCVSS v3
Severity scale
010
Description
Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.
velero-io/velero
GitHubBackup and migrate Kubernetes applications and their persistent volumes
GitHubBackup and migrate Kubernetes applications and their persistent volumes>= 1.5.0, < 1.5.2, < 1.4.3NVD