CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: vitess, vault-secrets-webhook, nova, newrelic-nri-statsd, ko, harbor, temporal-server, gostatsd, nri-postgresql, vault-benchmark, falco-no-driver, buildah, crossplane, datadog-agent, kubernetes-dashboard, otel-cli, azure-service-operator, kube-logging-operator,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: ko, harbor, falco-no-driver, buildah, crossplane, datadog-agent, kubernetes-dashboard, azure-service-operator, timestamp-authority, undock, skopeo, act, k8sgpt, atlantis, aws-flb-cloudwatch, dask-gateway, conftest, cortex, rabbitmq-cluster-operator, nfpm,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: ko, harbor, falco-no-driver, buildah, crossplane, datadog-agent, kubernetes-dashboard, azure-service-operator, timestamp-authority, undock, skopeo, act, k8sgpt, atlantis, aws-flb-cloudwatch, dask-gateway, conftest, cortex, rabbitmq-cluster-operator, nfpm,...

CVE-2026-40050

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CVE-2026-40050: Missing Authentication for Critical Function

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CrowdStrike LogScale 安全漏洞

CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: kuma, pluto, nova, trivy, helm-mapkubeapis, chartmuseum, zarf, helm-set-status, cerbos, headlamp, harbor, cilium-cli, helm-operator, k9s, helm-push, eksctl, k8ssandra-client, kubescape, flux, tigera-operator, zot, istio, chart-testing, envoy-gateway, kots, helm, tw,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kuma, pluto, nova, trivy, helm-mapkubeapis, chartmuseum, zarf, helm-set-status, cerbos, headlamp, harbor, cilium-cli, helm-operator, k9s, helm-push, eksctl, k8ssandra-client, kubescape, flux, tigera-operator, zot, istio, chart-testing, envoy-gateway, kots, helm, tw,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, headlamp, zot, chaos-mesh, harbor-fips, helm-exporter-fips, rancher-fleet-fips, kubescape, helm-diff, cloudbeat-fips, helm-operator-fips, jfrog-cli, linkerd2-fips, cloudbeat, cilium-cli, helm-set-status, trivy-operator-fips, zarf,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, timoni, harbor, rancher-webhook, crossplane-provider-family-azure, terraform-provider-time, flux-helm-controller, knative-eventing, kyverno-notation-aws, esbuild, keda, envoy-gateway, opentelemetry-operator, flux-notification-controller, swagger,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, headlamp, zot, chaos-mesh, harbor-fips, helm-exporter-fips, rancher-fleet-fips, kubescape, helm-diff, cloudbeat-fips, helm-operator-fips, jfrog-cli, linkerd2-fips, cloudbeat, cilium-cli, helm-set-status, trivy-operator-fips, zarf,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, kubernetes-csi-external-snapshotter, gitea, timoni, terraform-provider-time, flux-helm-controller, knative-eventing, keda, flux-notification-controller, swagger, timestamp-authority, aws-s3-controller, apache-exporter, pvc-autoresizer, skopeo,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: docker-cli, k8ssandra-operator, verticadb-operator, cluster-api-aws-controller, boring-registry, kubernetes-csi-external-snapshotter, yunikorn-k8shim, timoni, cluster-api-provider-vsphere, gitness, temporal-server, vault-benchmark, kubernetes-dashboard-api,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: docker-cli, k8ssandra-operator, verticadb-operator, cluster-api-aws-controller, boring-registry, kubernetes-csi-external-snapshotter, yunikorn-k8shim, timoni, cluster-api-provider-vsphere, gitness, temporal-server, vault-benchmark, kubernetes-dashboard-api,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, kubernetes-csi-external-snapshotter, gitea, timoni, terraform-provider-time, flux-helm-controller, knative-eventing, keda, flux-notification-controller, swagger, timestamp-authority, aws-s3-controller, apache-exporter, pvc-autoresizer, skopeo,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, kubernetes-csi-external-snapshotter, gitea, timoni, terraform-provider-time, flux-helm-controller, knative-eventing, keda, checksec, flux-notification-controller, swagger, timestamp-authority, aws-s3-controller, apache-exporter, pvc-autoresizer,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kubevirt-cdi-controller, terragrunt, kube-arangodb-fips, gomplate-fips, jobset-fips, sftpgo-plugin-kms, spicedb, volsync, temporal-fips, ops-agent, secrets-store-csi-driver-provider-gcp-fips, sftpgo, otel-cli, spicedb-fips, k6, cloud-provider-aws-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: trivy, boring-registry, gitea, gitness, crossplane-provider-family-azure, flux-helm-controller, opentofu, crossplane-provider-keycloak, kyverno-notation-aws, crossplane-provider-aws-cloudfront, datadog-agent, crossplane, pulumi-language-yaml,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: trivy, boring-registry, gitea, gitness, crossplane-provider-family-azure, flux-helm-controller, opentofu, crossplane-provider-keycloak, kyverno-notation-aws, crossplane-provider-aws-cloudfront, datadog-agent, crossplane, pulumi-language-yaml,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns-fips, crossplane-provider-aws-cloudwatchlogs, gomplate, crossplane-provider-aws-cloudfront-fips, openbao-fips, flux-kustomize-controller-fips, rclone, cloudbeat, terragrunt, gomplate-fips, crossplane-provider-aws-efs,...