Threats tagged 'ghsa-c8g6-qrwh-m3vp'

NeuVector Enforcer contains a critical vulnerability where environment variables CLUSTER_RPC_PORT and CLUSTER_LAN_PORT are used unsafely to construct shell commands executed via popen without sanitization. This allows command injection and buffer overflow within the enforcer container. The issue is fixed in versions 5.3.5, 5.4.7, and later. No workaround exists; users must upgrade promptly.