aws-iam-authenticator

AWS IAM Authenticator for Kubernetes AWS IAM 認証情報を使用して Kubernetes クラスターに認証するためのツールです。 このツールの初期開発は Heptio によって推進されました。このプロジェクトは複数のコミュニティエンジニアからの貢献を受けており、現在は Heptio と Amazon EKS OSS エンジニアによってメンテナンスされています。 Table of Contents なぜこれが必要なのか? どう使うのか? Kops の使い方 どう動作するのか? クラスター ID とは何か? 認証情報の指定と AWS プロファイルの使...

CVE-2024-3094

CVE-2024-3094 POC di base per testare la vulnerabilità CVE-2024-3094 all'interno di un cluster K8s ❗ DISCLAIMER ❗ UTILIZZARE SOLO PER SCOPI EDUCATIVI. L'AUTORE NON È RESPONSABILE DI QUALSIASI DANNO CAUSATO DALL'USO DI QUESTO SOFTWARE Descrizione Distribuiremo un pod vulnerabile e lo sfrutteremo p...

copy-fail-blocker

copy-fail-blocker Mitigazione BPF-LSM per CVE-2026-31431 "Copy Fail" e per la variante RxRPC di Dirty Frag, e per vulnerabilità simili di escalation dei privilegi che dipendono dall'accesso da spazio utente a un percorso crittografico in-place lato kernel raggiungibile tramite le famiglie di sock...

GHSA-4MRV-5P47-P938 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-54522 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-54522 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-4MRV-5P47-P938 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-MHC6-2GFQ-XX62 Rancher vulnerable to command injection through unsanitized YAML parameter

Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters. This endpoint accepts an authImage query parameter that is rendered without sanitization into a generated...

Rancher vulnerable to command injection through unsanitized YAML parameter

Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters. This endpoint accepts an authImage query parameter that is rendered without sanitization into a generated...

CVE-2026-44160 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-72F5-RR8C-R6GR vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-PR7J-96CJ-549H vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-44HJ-4M45-FRJ3 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-44025 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-44024 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-J9CW-HWQF-85W7 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-44161 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-PR7J-96CJ-549H vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator, kube-fluentd-operator...

GHSA-44HJ-4M45-FRJ3 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator, kube-fluentd-operator...

CVE-2026-44025 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator, kube-fluentd-operator...