minder

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Minder GetRepositoryByName data leakCVE-2024-31455stacklok · CVSS 4.3 · 0.8% likely

   CWE-200

2. `GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated userCVE-2024-27916stacklok · CVSS 7.1 · 0.7% likely

   CWE-285

3. Minder's Github Webhook Handler vulnerable to denial of service from un-validated requestsCVE-2024-34084stacklok · CVSS 7.5 · 0.6% likely

   CWE-400

4. Minder trusts client-provided mapping from repo name to upstream IDCVE-2024-27093stacklok · CVSS 4.6 · 0.6% likely

   CWE-20

5. Denial of service of Minder Server from maliciously crafted GitHub attestationsCVE-2024-35238stacklok · CVSS 5.3 · 0.5% likely

   CWE-770

6. Denial of service of Minder Server with attacker-controlled REST endpointCVE-2024-35185stacklok · CVSS 5.3 · 0.5% likely

   CWE-770

7. Denial of service from maliciously configured Git repository in MinderCVE-2024-37904stacklok · CVSS 5.7 · 0.5% likely

   CWE-400

8. Stacklok Minder vulnerable to denial of service from maliciously crafted templatesCVE-2024-35194stacklok · CVSS 5.3 · 0.4% likely

   CWE-400

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.