CVE-2020-3996

Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.

Date published : 2020-10-22

https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4