434 matches found
hardening-k8s-containers
意図的に脆弱にしたノートアプリケーション このリポジトリには、非常にシンプルで脆弱なアプリケーションが含まれています。このアプリケーションをデフォルト設定でKubernetesクラスタにデプロイする場合と、いくつかの追加のセキュリティ設定を加えた場合の違いを示すためのものです。追加のセキュリティ設定はアプリケーションの脆弱性を修正するものではありませんが、攻撃者が悪意のある行動を行うのを制限します。...
Astra Linux – Vulnerability in Golang-github-appc-cni
A flaw in path name limitations was identified in containernetworking/cni in versions prior to 0.8.1. When specifying the plugin to be loaded in the ‘type’ field of the network configuration, it is possible to use special elements such as “/” separators to reference binaries located elsewhere on...
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: cni-plugins, kube-vip...
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: cni-plugins-fips, amazon-k8s-cni-fips, kube-vip, cni-plugins, kube-vip-fips...
GO-2026-5876 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GO-2024-2922 vulnerabilities
Vulnerabilities for packages: cilium, hubble, hubble-ui-backend-fips, hubble-ui, hubble-fips, cilium-fips...
GO-2025-3416 vulnerabilities
Vulnerabilities for packages: cilium, hubble, hubble-ui-backend-fips, hubble-ui, hubble-fips, cilium-fips...
GO-2025-3465 vulnerabilities
Vulnerabilities for packages: kapp-fips, cluster-autoscaler, argocd-image-updater-fips, kubernetes-csi-driver-nfs, kubernetes-csi-driver-nfs-fips, kubernetes-dns-node-cache-fips, kubernetes-fips, yunikorn-k8shim, kubernetes-csi-driver-hostpath, local-static-provisioner-fips, rancher-webhook, kapp...
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: containerd-fips, istio-fips, multus-cni, kuma, rootlesskit, calico-fips, buildah, buildkitd-fips, datadog-agent-fips, nerdctl, azure-ipam, k3s, flannel, buildkitd, rke2-runtime, docker, docker-fips, amazon-k8s-cni-fips, flannel-fips, nerdctl-fips, multus-cni-fips,...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: flux-image-reflector-controller, flux-helm-controller, flux-operator-fips, victorialogs, flux-fips, terragrunt, polaris, grafana-operator-fips, dkron, steampipe, podinfo, flux-source-watcher, temporal-fips, cert-manager-fips, localstack, librechat, go,...
GO-2025-3415 vulnerabilities
Vulnerabilities for packages: hubble-ui...
GO-2024-2569 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble...
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: docker, containerd, datadog-agent, buildkitd, istio, calico, flannel, multus-cni, rootlesskit, kuma, nerdctl, azure-ipam, buildah, k3s, podman...
GO-2024-2598 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, cni-plugins, hello-world-golang, prometheus-pushgateway, kwok, chartmuseum, secrets-store-csi-driver-provider-azure, capslock, kubernetes-csi-livenessprobe, vexctl, kubevela, influx, nri-elasticsearch, docker-credential-ecr-login, rqlit...
GO-2024-2599 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, cni-plugins, hello-world-golang, prometheus-pushgateway, kwok, chartmuseum, secrets-store-csi-driver-provider-azure, capslock, kubernetes-csi-livenessprobe, vexctl, kubevela, influx, nri-elasticsearch, docker-credential-ecr-login, rqlit...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: vault-benchmark, pinact, sftpgo-plugin-auth, trino, mattermost, rook, conjur-cli, crossplane-provider-family-azure, kubernetes-csi-livenessprobe, guac, kube-logging-operator-custom-runner, kubevela, crossplane-provider-aws-route53, polaris, nri-elasticsearch, redka,...
GO-2026-4984 vulnerabilities
Vulnerabilities for packages: vault-benchmark, mc, sftpgo-plugin-auth, zot, trino, mattermost, cni-plugins, conjur-cli, argo-cd, juicefs, prometheus-pushgateway, ratify, secrets-store-csi-driver-provider-azure, guac, vault-secrets-webhook, kubevela, undock, influx, redka,...
GO-2023-2382 vulnerabilities
Vulnerabilities for packages: grpcurl, cni-plugins, flannel-cni-plugin, amass, oras, influx, petname, aws-flb-cloudwatch, go-md2man, docker-credential-ecr-login, sops, mage, vertical-pod-autoscaler, render-template, k3d, scorecard, kubeflow-katib, cortex, sonobuoy, gops, hey, protoc-gen-go-grpc,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: zot, cni-plugins, clickhouse-operator, ratify, chartmuseum, guac, polaris, spire-controller-manager, undock, kyverno-notation-aws, aws-privateca-issuer, containerd, rabbitmq-default-user-credential-updater, neuvector-sigstore-interface, ko,...
