CVE-2026-79787 Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature

Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract usernames from unsigned Authorization headers and impersonate any user, including service accounts, to read,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: sops, rancher-system-agent, kubeflow, k3s, whereabouts, dask-gateway, descheduler, kustomize, kuberay-operator, conftest, litestream, extism, mattermost, neuvector-sigstore-interface, src, crossplane-provider-aws-ec2, hubble-ui, aws-privateca-issuer,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, conftest, apisix-ingress-controller, kube-state-metrics,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: stern, rancher-system-agent, oras, whereabouts, shfmt, conftest, go-tools, protoc-gen-go, direnv, chart-testing, ipfs-cluster, azure-workload-identity-webhook, gostatsd, yace, ferretdb, promxy, mongo-tools, redka, manifest-tool, kuberlr, dbmate, helm-set-status,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: sops, stern, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: sops, stern, gosu, kaf, spiffe-helper, rancher-system-agent, cadvisor, kubeflow, logstash-exporter, oras, nri-prometheus, dask-gateway, terraform-provider-azapi, whereabouts, wireguard-go, kustomize, shfmt, conftest, apisix-ingress-controller, kube-state-metrics,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: localstack, sealed-secrets, crossplane-provider-terraform-fips, pvc-autoresizer-fips, wireguard-go, istio-fips, age, cloudbeat, mc, rancher, vendir-fips, vendir, falco-exporter-fips, prometheus-elasticsearch-exporter, juicefs, elvish, vault-secrets-webhook,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: paranoia, temporal-ui-server-fips, snyk-cli, azuredisk-csi, thanos, secrets-store-csi-driver-provider-azure, cortex, fluent-bit-plugin-loki, metrics-agent-fips, mc, argo-events-fips, minio-operator, sigstore-scaffolding-fips, kubernetes-dashboard-api-fips, gitea,...