nebula

Nebula Cybersecurity harness built around the operator Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Use Nebula only on systems and networks you own or are explicitly authorized to test. Key features One...

CVE-2026-83494

A vulnerability exists in the training-operator where incorrect object casting in the PyTorchJob ValidateUpdate webhook allows users to bypass managedby immutability checks. This flaw could enable a user to detach a queued job from its quota management system or hijack the controller ownership of...

EUVD-2026-117966

A flaw was found in the training-operator. An incorrect object casting in the PyTorchJob ValidateUpdate webhook allows users to bypass an immutability check. This vulnerability could enable users to detach a queued job from its quota management system or hijack a running job's controller ownershi...

MinIO Operator Console Authentication Bypass

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...

CVE-2026-122319

A flaw was found in Kyverno. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting specially crafted resources evaluated by the In and NotIn operators. Because the policy engine fails to properly validate unexpected data types, processing these inputs triggers...

starboard

Starboard is joining Trivy. We've announced our plans to discontinue Starboard and merge it into Trivy. Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator. We will not be accepting new...

renovate-operator

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

GHSA-2HHJ-VJ64-HX3J vulnerabilities

Vulnerabilities for packages: grafana-operator-fips, grafana-operator...

GHSA-Q7GW-24FR-5P69 vulnerabilities

Vulnerabilities for packages: kube-state-metrics-fips, grafana-operator-fips, kube-state-metrics, grafana-operator, prometheus-fips, keda-fips, prometheus, keda...

GHSA-JH75-XV39-VHVX vulnerabilities

Vulnerabilities for packages: grafana-operator-fips, grafana-operator...

GHSA-RRFC-GJM9-CGRJ vulnerabilities

Vulnerabilities for packages: kube-state-metrics-fips, grafana-operator-fips, kube-state-metrics, grafana-operator, prometheus-fips, keda-fips, prometheus, keda...

GHSA-JH75-XV39-VHVX vulnerabilities

Vulnerabilities for packages: grafana-operator...

GHSA-Q7GW-24FR-5P69 vulnerabilities

Vulnerabilities for packages: grafana-operator, kube-state-metrics...

GHSA-RRFC-GJM9-CGRJ vulnerabilities

Vulnerabilities for packages: grafana-operator, kube-state-metrics...

GHSA-2HHJ-VJ64-HX3J vulnerabilities

Vulnerabilities for packages: grafana-operator...

BackupOperatorToolkit

BackupOperatorToolkit Usage The BackupOperatorToolkit BOT has 4 different mode that allows you to escalate from Backup Operator to Domain Admin. Use "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" before running the tool. Service Mode The SERVICE mode creates a service on the...

CVE-2026-88034

A flaw was found in the MongoDB C++ Driver. This flaw, located in the GridFS component, allows an authenticated user to perform query-operator injection by influencing file identifiers. This can lead to unauthorized access to stored file content or the deletion of all GridFS file chunks, making...

Important: Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update

An updated OpenShift Compliance Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift Compliance Operator v1.10.1 is now available. See the documentation for bug fix information:...