794 matches found
mesh-kridik
mesh-kridik 增强您的 Kubernetes 服务网格安全性！！ mesh-kridik 是一个开源安全检查器，对运行 Istio 服务网格的 Kubernetes 集群执行各种安全检查，并输出安全报告。 安全检查测试完整实现了 istio 安全最佳实践。 在运行 Istio 服务网格的 Kubernetes 集群上执行安全检查，并利用 OPA（Open Policy Agent）强制执行安全规则，输出审计报告包括： 安全问题根因以及建议的修复措施。 要求 安装 快速开始 Istio 安全检查 用户插件使用 支持的规范 贡献 要求 Go 1.16+ jq istio 安装...
mesh-kridik
mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...
CVE-2021-34824
CVE-2021-34824 repro reproduciendo un antiguo bug de istio Este conjunto de scripts y manifiestos ayudará a explorar un antiguo problema de seguridad de Istio que permitía a usuarios malintencionados de Istio acceder a secretos de Kubernetes a los que no deberían tener acceso. Esta reproducción...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.15
Red Hat OpenShift Service Mesh 3.0.15 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: k3s, kube-rbac-proxy, apisix-ingress-controller, kyverno, descheduler, cass-operator, datadog-agent, cert-manager-istio-csr, cloud-provider-gcp-cloud-controller-manager, keda, calico, kwok, crossplane, zot, pulumi-kubernetes-operator, kuma, kube-state-metrics, hubble...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: zarf, eksctl, pluto, istio, envoy-gateway-fips, cilium-cli, helm-push, flux-source-controller-fips, helm-operator-fips, cerbos-fips, envoy-gateway, cert-manager-cmctl, rancher-fleet, linkerd2, rancher-fleet-fips, chart-testing, k8ssandra-client-fips, k8ssandra-client...
GO-2026-5289 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr...
GO-2026-5363 vulnerabilities
Vulnerabilities for packages: istio, cert-manager-istio-csr-fips, cert-manager-istio-csr...
GO-2025-3900 vulnerabilities
Vulnerabilities for packages: k9s-fips, istio-fips, boring-registry-fips, docker-compose-fips, kyverno-notation-aws-fips, kyverno, ratify-fips, pluto-fips, beats, tkn-fips, bank-vaults, grafana, beats-fips, jitsucom-bulker, neuvector-sigstore-interface-fips, grafana-fips, zitadel, mattermost-fips...
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: containerd, istio-fips, buildkitd-fips, istio, azure-ipam, datadog-agent-fips, calico-fips, multus-cni, nerdctl-fips, containerd-fips, podman, k3s, docker, flannel, rke2-runtime, amazon-k8s-cni-fips, rootlesskit, nerdctl, multus-cni-fips, datadog-agent, calico,...
GO-2026-5381 vulnerabilities
Vulnerabilities for packages: trillian, opentelemetry-operator-fips, istio-fips, aws-otel-collector-fips, amazon-cloudwatch-agent-operator, minio-fips, commercial-grafana, istio, trillian-fips, cloudzero-agent, minio-object-browser-fips, datadog-agent-fips, agentbeat, loki, minio, mcp-grafana,...
GO-2026-5710 vulnerabilities
Vulnerabilities for packages: prometheus-operator-fips, trillian, istio-fips, aws-otel-collector-fips, amazon-cloudwatch-agent-operator, minio-fips, commercial-grafana, istio, trillian-fips, cloudzero-agent, datadog-agent-fips, agentbeat, loki, minio, telegraf, jaeger-fips, ld-relay-fips, tempo,...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: prometheus-operator-fips, trillian, istio-fips, aws-otel-collector-fips, amazon-cloudwatch-agent-operator, minio-fips, commercial-grafana, istio, trillian-fips, cloudzero-agent, datadog-agent-fips, agentbeat, loki, minio, telegraf, splunk-otel-collector, jaeger-fips,...
GO-2026-5363 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr...
GO-2026-5289 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr...
GO-2026-5030 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-storage, telegraf, crossplane-provider-azure-authorization, k3s, traefik, glab, crossplane-provider-aws-elasticache, kyverno, istio, prometheus, fq, ingress-nginx-controller, step-issuer, prometheus-operator, caddy, mattermost, gitea, helm,...
GO-2026-5028 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-storage, telegraf, crossplane-provider-azure-authorization, k3s, traefik, glab, crossplane-provider-aws-elasticache, kyverno, istio, prometheus, fq, ingress-nginx-controller, step-issuer, prometheus-operator, caddy, mattermost, gitea, helm,...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: rancher-fleet, helm-docs, rancher-helm, tw, istio, chart-testing, k8sgpt, cert-manager-cmctl, flux-source-controller, zarf, helm-push, pluto, kargo, flux-helm-controller, cluster-api-helm-controller, chartmuseum, cilium-cli, envoy-gateway, cerbos, kots,...