CVE-2026-34940

CVE-2026-34940 — Внедрение OS-команд в KubeAI через URL модели в стартовом пробе Ollama Серьёзность : Высокая CVSS 8.7 CWE : CWE-78 — Некорректная нейтрализация специальных элементов, используемых в OS-команде Затронуто : github.com/kubeai-project/kubeai = commit ba1824e Консультация : GHSA NVD :...

renovate-operator

Renovate : la voie native Kubernetes Exécutez Renovate sur votre propre infrastructure avec une planification basée sur les CRD, l'exécution en parallèle, l'auto-découverte et une interface utilisateur intégrée. Si vous auto-hébergez Renovate et utilisez déjà Kubernetes, cet opérateur vous offre ...

gatekeeper

Gatekeeper Чем Gatekeeper отличается от OPA? По сравнению с использованием OPA с его сайдкаром kube-mgmt также известным как Gatekeeper v1.0, Gatekeeper добавляет следующие возможности: Расширяемая параметризуемая библиотека политик Нативные CRD Kubernetes для инстанцирования библиотеки политик...

K000162600: NGINX Gateway Fabric vulnerability CVE-2026-66362

Security Advisory Description When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the AuthenticationFilter custom resource definition CR...

CVE-2026-66782 Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps

A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account SA bearer token within the Submariner Custom Resource CR specification. An attacker with access to the cluster's etcd database or through kubectl get commands could obtai...

GO-2026-5602 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

CVE-2026-16456 Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy

A flaw was found in the odh-model-controller. An authenticated user with permissions to create custom resources can exploit a vulnerability in the loadSecret function. This function improperly reads the Secret namespace from user-controlled input without validation. This allows an attacker to rea...

CVE-2026-71325

Traefik is an open-source edge router that makes publishing services a fun and easy experience. Prior to 2.11.54, 3.6.25, and 3.7.10, cross-namespace @kubernetescrd references are not rejected for TraefikService backend references resolved by the service resolver. A tenant confined by RBAC to a...

GHSA-62FC-8686-HFMQ Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef

Summary There is a medium severity vulnerability in Traefik's Kubernetes CRD provider. When providers.kubernetesCRD.allowCrossNamespace is disabled — the default — cross-namespace @kubernetescrd references are rejected for middlewares, TLS options and HTTP/TCP ServersTransports, but the same...

Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef

Summary There is a medium severity vulnerability in Traefik's Kubernetes CRD provider. When providers.kubernetesCRD.allowCrossNamespace is disabled — the default — cross-namespace @kubernetescrd references are rejected for middlewares, TLS options and HTTP/TCP ServersTransports, but the same...

CVE-2026-71325

Traefik exposes a cross-namespace bypass for TraefikService backends via @kubernetescrd references. The CVE affects Traefik’s Kubernetes CRD service resolver: when the reference name contains an @kubernetescrd, the resolver’s guard for cross-namespace references is not enforced for TraefikService...

Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass

Summary There is a medium-severity cross-provider reference vulnerability in Traefik's Kubernetes CRD provider. The crossProviderNamespaces allowlist is enforced for HTTP serversTransport references but was not enforced for IngressRouteTCP service serversTransport references. A low-privileged...

GHSA-42CJ-M3VJ-89WV Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass

Summary There is a medium-severity cross-provider reference vulnerability in Traefik's Kubernetes CRD provider. The crossProviderNamespaces allowlist is enforced for HTTP serversTransport references but was not enforced for IngressRouteTCP service serversTransport references. A low-privileged...

CVE-2026-17617

IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of URLs specified in custom resources...

CVE-2026-71208 KubeSphere - SSRF via Unvalidated Cluster CRD Connection Endpoint in Cluster Reconciliation

KubeSphere's cluster-controller reconciliation pkg/utils/clusterclient/clusterclient.go, addCluster processes every Cluster custom resource's connection configuration and immediately calls Discovery.ServerVersion against the CRD-specified Kubernetes API endpoint, which is parsed only for URL synt...

SUSE CVE-2026-50564

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Environment CRD exposes spec.runtime.podSpec and spec.builder.podSpec, which are merged into the Kubernetes pod specs fo...

EUVD-2026-36074

Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAPSYSTIME and cross-tenant node wall-clock corruption...

SUSE CVE-2026-55723

When NGINX Ingress Controller is configured with Custom Resource Definitions CRDs or Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without...

CVE-2026-55723 NGINX Ingress Controller vulnerability

When NGINX Ingress Controller is configured with Custom Resource Definitions CRDs or Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without...

GO-2026-5860 Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover in github.com/fission/fission

Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover in github.com/fission/fission...