stacklok minder

• CVE-2024-37904 Medium 5.7 Denial of service from maliciously configured Git repository in Minder 0.5%
• CVE-2024-35238 Medium 5.3 Denial of service of Minder Server from maliciously crafted GitHub attestations 0.5%
• CVE-2024-35194 Medium 5.3 Stacklok Minder vulnerable to denial of service from maliciously crafted templates 0.4%
• CVE-2024-35185 Medium 5.3 Denial of service of Minder Server with attacker-controlled REST endpoint 0.5%
• CVE-2024-34084 High 7.5 Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests 0.6%
• CVE-2024-31455 Medium 4.3 Minder GetRepositoryByName data leak 0.8%
• CVE-2024-27916 High 7.1 `GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user 0.7%
• CVE-2024-27093 Medium 4.6 Minder trusts client-provided mapping from repo name to upstream ID 0.6%