CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, guac, gpu-operator-fips, gpu-operator, kube-arangodb...

Authorization Bypass

Apache Camel is vulnerable to Authorization Bypass. The vulnerability is due to insufficient validation of user-controlled Build resources, which allows an authorized attacker to generate Pods in arbitrary Kubernetes namespaces, including the operator namespace...

SUSE CVE-2026-47770

jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operator exhausts the C stack on jq's ordinary command-line surface, resulting in denial of service via stack exhaustion uncontrolled recursion. The crash occurs in jq's recursive...

Nebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)

Summary The web UI /ui/ does not apply the per-operator CA scoping the JSON API received for GHSA-598g-h2vc-h5vg. Any authenticated non-admin operator for example, one created via self-registration or OIDC can access resources belonging to other operators. Impact A non-admin operator can: - Block...

GHSA-C6V2-3FFM-VCMC Nebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)

Summary The web UI /ui/ does not apply the per-operator CA scoping the JSON API received for GHSA-598g-h2vc-h5vg. Any authenticated non-admin operator for example, one created via self-registration or OIDC can access resources belonging to other operators. Impact A non-admin operator can: - Block...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.3.3. Vulnerability Details CVEID:CVE-2026-45447 DESCRIPTION: Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubernetes-fips, drone, cloud-provider-aws, gitlab-rails-ce, traefik-fips, gitea, rancher-agent, nerdctl, chisel-fips, knative-kafka-broker, kots, frankenphp-8.5, fscrypt, seaweedfs-rocksdb, tekton-pipelines-fips, drone-fips, k9s-fips, zitadel, etcd-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: peerdb-flow, flux-kustomize-controller-fips, kubernetes-fips, splunk-otel-collector-fips, go-discover-fips, tekton-chains-fips, guac, drone, cloud-provider-aws, gitlab-rails-ce, traefik-fips, gitea, step, crossplane-provider-azure-security, scorecard, rancher-agent,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: peerdb-flow, kubernetes-fips, splunk-otel-collector-fips, guac, drone, longhorn-manager, cloud-provider-aws, gitlab-rails-ce, traefik-fips, gitea, scorecard, rancher-agent, podman-fips, chainctl, nerdctl, chezmoi, chisel-fips, docker, docker-cli-buildx, melange,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, drone, cloud-provider-aws, gitlab-rails-ce, traefik-fips, gitea, rancher-agent, nerdctl, chisel-fips, knative-kafka-broker, kots, frankenphp-8.5, fscrypt, seaweedfs-rocksdb, tekton-pipelines-fips, drone-fips, k9s-fips, zitadel, etcd-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: peerdb-flow, flux-kustomize-controller-fips, kubernetes-fips, splunk-otel-collector-fips, go-discover-fips, tekton-chains-fips, guac, drone, cloud-provider-aws, gitlab-rails-ce, traefik-fips, gitea, step, crossplane-provider-azure-security, scorecard, rancher-agent,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: peerdb-flow, flux-kustomize-controller-fips, gitlab-rails-ce, terraform-provider-acme-fips, rancher-agent, podman-fips, chisel-fips, crossplane-provider-aws-sqs, sealed-secrets, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-cognitoidp-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, splunk-otel-collector-fips, guac, cloud-provider-aws, gitlab-rails-ce, traefik-fips, gitea, scorecard, rancher-agent, podman-fips, chainctl, nerdctl, chezmoi, melange, knative-kafka-broker, kots, frankenphp-8.5, fscrypt, mapotf-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: peerdb-flow, flux-kustomize-controller-fips, gitlab-rails-ce, terraform-provider-acme-fips, rancher-agent, podman-fips, chisel-fips, crossplane-provider-aws-sqs, sealed-secrets, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-cognitoidp-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: tflint, policy-controller, opentofu, eksctl, crossplane-provider-azure-storage, snyk-cli, fscrypt, nerdctl, terraform-provider-azurerm, rancher, gh, flux-kustomize-controller, guac, rancher-machine, crossplane-provider-azure-authorization, prometheus, minio,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tflint, policy-controller, opentofu, eksctl, crossplane-provider-azure-storage, snyk-cli, fscrypt, nerdctl, terraform-provider-azurerm, rancher, gh, flux-kustomize-controller, guac, rancher-machine, crossplane-provider-azure-authorization, prometheus, minio,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cert-manager, gitlab-kas, kyverno, cloud-provider-aws, osv-scanner, helm, snyk-cli, trivy, fscrypt, nerdctl, spire-server, rancher, k9s, zot, argocd-image-updater, flux-image-automation-controller, mattermost, gitea, flux-source-controller, prometheus, kubernetes,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cert-manager, gitlab-kas, kyverno, cloud-provider-aws, helm, snyk-cli, fscrypt, nerdctl, spire-server, rancher, zot, mattermost, prometheus, kubernetes, cilium-cli, containerd, istio, k3s, kubernetes-dashboard, minio, podman, falco-no-driver, kine, aactl, loki,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: tflint, policy-controller, opentofu, eksctl, crossplane-provider-azure-storage, snyk-cli, fscrypt, nerdctl, terraform-provider-azurerm, rancher, gh, flux-kustomize-controller, guac, rancher-machine, crossplane-provider-azure-authorization, prometheus, minio,...

CVE-2026-9640

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...