p PatchFirst

PatchFirst · Latest vulnerabilities

ops vulnerabilities

Vulnerabilities published for ops in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2024-41129

    Medium · CVSS 4.4EPSS 0.2%Fix available

    The ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

    The ops library is a Python framework for developing and testing Kubernetes and machine charms. The issue here is that ops passes the secret content as one of the args via CLI. This issue may affect any of the charms that are using: Juju (>=3.0), Juju secrets and not correctly capturing and processing `subprocess.CalledProcessError`. This vulnerability is fixed in 2.15.0.

    opsPython
    • Update to 2.15.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →