opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

litmus

LitmusChaos Open Source Chaos Engineering Platform Read this inother languages. 🇰🇷 🇨🇳 🇧🇷 🇮🇳 🇪🇸 Overview LitmusChaos is an open source Chaos Engineering platform that enables teams to identify weaknesses & potential outages in infrastructures by inducing chaos tests in a controlled way. Developers &...

kubescape

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

chaos-mesh

Chaos Mesh is an open source, cloud-native Chaos Engineering platform for Kubernetes. It uses Kubernetes custom resources to define, orchestrate, and observe controlled fault injection against workloads, infrastructure, cloud services, and applications. Chaos Mesh is a Cloud Native Comp...

Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...

opa

Open Policy Agent Open Policy Agent OPA è un motore di policy open source e di uso generale che consente un'applicazione delle policy unificata e sensibile al contesto nell'intero stack. OPA è orgoglioso di essere un progetto graduated nel panorama della Cloud Native Computing Foundation CNCF. Pe...

BIT-ENVOY-2020-8664

CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...

falco v0.45.0-rc1

Falco Falco is a cloud native runtime security tool for Linux operating systems. It is designed to detect and alert on abnormal behavior and potential security threats in real-time. At its core, Falco is a kernel monitoring and detection agent that observes events, such as syscalls, based on cust...

opa v1.20.2

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

kubescape v4.0.13

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

pipelock v3.5.0

Open-source AI agent firewall forVerifiable Egress Control. !pipelock...

cilium v1.20.1

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...

kubescape v4.0.12

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

sops v3.13.3

SOPS: Secrets OPerationS SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP. demo .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

example-pkg-naturalett (>=14.4.0, <=14.4.8) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (2.0.0)

apache-airflow-providers-cncf-kubernetes PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.8 Source cves: CVE-2026-27173 Source...

openmetadata-airflow-managed-apis (>=0.1.0, <=0.10.0.1) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (6.1.0)

apache-airflow-providers-cncf-kubernetes PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - openmetadata-airflow-managed-apis =0.1.0, =0.10.0.1 Source cves: CVE-2026-27173...

apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (1.0.2)

apache-airflow-providers-cncf-kubernetes PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =2.0.0 - example-pkg-naturalett 14.7.0 Source...

mojap-airflow-tools (>=2.0.1, <=2.1.1) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (1.2.0)

apache-airflow-providers-cncf-kubernetes PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - mojap-airflow-tools =2.0.1, =2.1.1 Source cves: CVE-2026-27173 Source advisory:...

mojap-airflow-tools (2.0.0) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (2.2.0)

apache-airflow-providers-cncf-kubernetes PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - mojap-airflow-tools 2.0.0 Source cves: CVE-2026-27173 Source advisory:...

flowui-project (>=0.0.9, <=0.0.13) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (4.2.0)

apache-airflow-providers-cncf-kubernetes PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - flowui-project =0.0.9, =0.0.13 Source cves: CVE-2026-27173 Source advisory:...