cerbos

什么是 Cerbos？ Cerbos 是一个与你的产品共同演进的授权层。它让你能够通过简单、直观的 YAML 策略，为应用程序资源定义强大的、上下文感知的访问控制规则；并通过 GitOps 基础设施进行管理和部署。它提供高可用的 API，通过简单的请求来评估策略，并为你的应用程序做出动态访问决策。 这个仓库包含了搭建自托管 Cerbos 策略决策点（PDP）所需的一切。免费注册 Cerbos Hub 账户，以简化你的策略编写和分发工作流，并将其分发到自托管的 PDP。 借助 Cerbos Hub，你可以： 与同事协作，在完全互动的私有 playground 中编写和共享策略...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k9s, chart-testing, eksctl, cluster-api-helm-controller, pluto, chartmuseum, k8ssandra-client, helm-push, k8sgpt, cerbos, cilium-cli, zarf, flux-helm-controller, helm-docs, flux-source-controller, rancher-helm, cert-manager-cmctl, helm-operator, istio, kargo,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gitaly, syft, flux, argo-cd, terragrunt, rclone, scorecard, teleport, cerbos, telegraf, kyverno, rancher-fleet...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gitaly, syft, argo-cd, terragrunt, rclone, scorecard, teleport, cerbos, kyverno, rancher-fleet...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gomplate, kubevela, flux, pulumi, k9s, pulumi-language-java, trivy-operator, tfsec, trufflehog, kyverno, gitaly, syft, xeol, argo-events, teleport, guac, cerbos, src-fingerprint, zarf, snyk-cli, flux-image-automation-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: aactl, docker-machine-driver-harvester, libnvidia-container, regclient, kubeflow-katib, harbor-registry, falcoctl, k3s, eksctl, prometheus, migrate, spark-operator, opentofu, nginx-prometheus-exporter, helm-push, aws-otel-collector, portieris, terraform-mcp-server,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: undock, libnvidia-container, flux, hubble, pulumi, mattermost, timestamp-authority, grafana-operator, kubeflow-katib, nerdctl, trino, kube-fluentd-operator, k3s, docker-cli-buildx, kyverno, kine, prometheus, kubernetes, opentofu, src, cert-manager, cerbos, cilium-cli...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: argo-events-fips, caddy-fips, hubble-ui, secrets-store-csi-driver-provider-gcp-fips, external-dns, kro, kubernetes-csi-driver-hostpath, crossplane-provider-aws-kafka, kyverno-notation-aws-fips, cluster-autoscaler-fips, kserve-fips, crossplane-provider-gcp-beta-comput...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: argo-events-fips, caddy-fips, hubble-ui, secrets-store-csi-driver-provider-gcp-fips, external-dns, kro, kubernetes-csi-driver-hostpath, crossplane-provider-aws-kafka, kyverno-notation-aws-fips, cluster-autoscaler-fips, kserve-fips, crossplane-provider-gcp-beta-comput...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gitaly, syft, argo-cd, terragrunt, rclone, scorecard, teleport, cerbos, kyverno, rancher-fleet...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gitaly, syft, argo-cd, terragrunt, rclone, scorecard, teleport, cerbos, kyverno, rancher-fleet...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, gitlab-rails-ce, chainloop-cli-fips, kyverno, terragrunt-fips, chainloop-cli, argo-cd-fips, rclone, rancher-fleet-fips, argo-cd, flux-fips, skaffold-fips, syft, terragrunt, flux, syft-fips, cerbos-fips, grafana-fips, nemo, scorecard,...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, gitlab-rails-ce, chainloop-cli-fips, kyverno, terragrunt-fips, chainloop-cli, argo-cd-fips, rclone, rancher-fleet-fips, argo-cd, flux-fips, skaffold-fips, syft, terragrunt, flux, syft-fips, cerbos-fips, grafana-fips, nemo, scorecard,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: trivy-fips, argo-events-fips, crossplane-fips, guac, trufflehog, nuclei, rancher-fleet-fips, argo-cd, trivy, syft-fips, kots, cerbos-fips, mapotf, xeol, nemo, scorecard, gitlab-runner-fips, chainctl-fips, chainctl, packer-fips, osv-scanner, amazon-ssm-agent, k9s-fips...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: caddy-fips, step, certificate-transparency, splunk-otel-collector-fips, gitlab-cng, sqlexporter, sftpgo-plugin-eventstore, gotrue, temporal, spqr, kots, opentelemetry-collector-contrib-fips, spire-server, falcosidekick-fips, rke2-runtime-fips,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: harbor, tigera-operator, flux, consul-k8s, k9s, chart-testing, trivy-operator, kube-arangodb, eksctl, cluster-api-helm-controller, pluto, headlamp, chartmuseum, k8ssandra-client, helm-push, nova, helm-mapkubeapis, kuma, cerbos, cilium-cli, zarf, helm-docs,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: harbor, tigera-operator, flux, consul-k8s, k9s, chart-testing, trivy-operator, kube-arangodb, eksctl, cluster-api-helm-controller, pluto, headlamp, chartmuseum, k8ssandra-client, helm-push, nova, helm-mapkubeapis, kuma, cerbos, cilium-cli, zarf, helm-docs,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: trivy-fips, gitlab-operator-fips, helm-set-status, nova, zarf-fips, consul-k8s-fips, cert-manager-cmctl, tigera-operator-fips, helm-exporter, helm, k8ssandra-client, flux-source-controller, kubescape-server, helm-docs, helm-diff, chart-testing, chartmuseum,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, aactl, kubernetes-event-exporter, rancher-loglevel, smokescreen, prometheus, sbom-convert, sbomqs, cilium, nri-kafka, terraform-provider-kubernetes, kafka-proxy, sriov-network-device-plugin, portieris, cert-manager-csi-driver,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, external-dns, cluster-autoscaler-fips, licenseclassifier, gitleaks, mailpit-fips, task, etcd, beats-fips, cilium, datadog-agent-fips, cephcsi-fips, mattermost, spegel-fips, datadog-agent, tekton-pipelines-fips, flux-source-controller-fips, kbld-fips...