GCVE - cpe:2.3:a:netapp:trident:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:trident:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Netapp (`f19678f6-cb27-5a55-8852-34b249f80ef9`)
Product	Trident (`c03facdf-c93e-547d-8132-345f4984bf85`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-34558`	vulnerable	2026-06-08 05:32:13.784888	Details available The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic. Published: 2021-07-15T13:47:36.000Z Updated: 2024-08-04T00:12:50.360Z Open on db.gcve.eu Reference links https://groups.google.com/g/golang-announce https://golang.org/doc/devel/release#go1.16.minor https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D7FRFM7WWR2JCT6NORQ7AO6B453OMI3I/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BA7MFVXRBEKRTLSLYDICTYCGEMK2HZ7/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYIUSR4YP52PWG7YE7AA3DZ5OSURNFJB/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-25742`	vulnerable	2026-06-08 05:30:41.534550	Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces HIGH (7.6) A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster. Published: 2021-10-29T04:05:10.713Z Updated: 2024-09-16T23:06:12.392Z Open on db.gcve.eu Reference links https://groups.google.com/g/kubernetes-security-announce/c/mT4JJxi9tQY https://github.com/kubernetes/ingress-nginx/issues/7837 https://security.netapp.com/advisory/ntap-20211203-0001/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-29511`	vulnerable	2026-06-08 05:24:58.347758	Details available CRITICAL (9.8) The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. Published: 2020-12-14T19:59:50.700Z Updated: 2024-09-17T04:09:22.123Z Open on db.gcve.eu Reference links https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-elements.md https://security.netapp.com/advisory/ntap-20210129-0006/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-29510`	vulnerable	2026-06-08 05:24:58.347355	Details available CRITICAL (9.8) The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. Published: 2020-12-14T19:57:44.107Z Updated: 2024-09-16T16:48:42.611Z Open on db.gcve.eu Reference links https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-directives.md https://security.netapp.com/advisory/ntap-20210129-0006/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-29509`	vulnerable	2026-06-08 05:24:58.346751	Details available CRITICAL (9.8) The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. Published: 2020-12-14T20:02:02.448Z Updated: 2024-09-17T03:43:39.703Z Open on db.gcve.eu Reference links https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-attributes.md https://security.netapp.com/advisory/ntap-20210129-0006/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28366`	vulnerable	2026-06-08 05:23:54.036234	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28362`	vulnerable	2026-06-08 05:23:54.031075	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9514`	vulnerable	2026-06-08 05:14:25.645572	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-11244`	vulnerable	2026-06-08 05:12:36.698369	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-11243`	vulnerable	2026-06-08 05:12:36.697786	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1002105`	vulnerable	2026-06-08 05:10:26.224067	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.