153 matches found
kubestriker
A Blazing fast Security Auditing tool for kubernetes!!...
trivy-operator
Kubernetes-native security toolkit. Documentation...
vinieger-CVE-2025-48384-Dockerfile
vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path root@kitploit...
USN-8660-1 linux-gcp, linux-gke vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...
GO-2023-1571 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, terraform-provider-sendgrid, grpcurl, go, kubeflow-katib, terraform-provider-sendgrid-fips, wireguard-go, dynamic-localpv-provisioner, gke-gcloud-auth-plugin, kube-state-metrics, restic, dynamic-localpv-provisioner-fips, k3d, kubeflow, hey...
GO-2023-1571 vulnerabilities
Vulnerabilities for packages: k3d, hey, gke-gcloud-auth-plugin, wireguard-go, kubeflow-katib, dynamic-localpv-provisioner, restic, kubeflow, terraform-provider-sendgrid, go, grpcurl...
Malicious code in gke-net (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d8166ccce1b949aaac0d7138ed8faf7494ac88239e6ff2f00cfdb1d1be4011 The package gke-net was found to contain malicious code...
MAL-2026-2766 Malicious code in gke-net (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d8166ccce1b949aaac0d7138ed8faf7494ac88239e6ff2f00cfdb1d1be4011 The package gke-net was found to contain malicious code...
CVE-2026-4810: Missing Authentication for Critical Function
A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit ADK versions 1.7.0 and 2.0.0a1 through 1.28.1 and 2.0.0a2 on Python OSS, Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This...
Ubuntu: Security Advisory (USN-8059-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8013-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7928-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7889-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7793-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7725-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7704-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7609-1 linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Netfilter; - Network traffic control; CVE-2025-38001, CVE-2025-37798, CVE-2025-37932,...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: goreleaser, cfssl, metallb, timoni, gke-gcloud-auth-plugin, memcached-exporter, configmap-reload, nri-discovery-kubernetes, go-licenses, delve, rqlite, slsa-verifier, kwok, actions-runner-controller, paranoia, php-fpmexporter, supercronic, hey, prometheus-alertmanage...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: goreleaser, cfssl, metallb, timoni, gke-gcloud-auth-plugin, memcached-exporter, configmap-reload, nri-discovery-kubernetes, go-licenses, delve, rqlite, slsa-verifier, kwok, actions-runner-controller, paranoia, php-fpmexporter, supercronic, hey, prometheus-alertmanage...
Ubuntu: Security Advisory (USN-7071-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...