105 matches found
kas checks out SHA-like git branches as valid commits
ImpactWhen relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch of the same name from this repository. This implies that the...
PT-2026-59201
Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...
PT-2026-59202
Impact When relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch of the same name from this repository. This implies that the...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: vitess, prometheus-operator, zarf, falco-no-driver, harbor-fips, cert-manager, trivy-fips, coder-fips, spire-server, commercial-expanso-edge, argo-workflows-fips, chisel-fips, knative-kafka-broker-fips, etcd-fips, snyk-cli, knative-serving, kubescape-server-fips,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: nuclei, step-kms-plugin, skaffold, teleport, guac, scorecard, opentofu, vault-benchmark, tekton-chains, act, step-issuer, terragrunt, ko, witness, go-discover, argo-events, crossplane-provider-azure-sql, k8sgpt, kubernetes, chisel, flux-kustomize-controller, buildkit...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: aactl, kubernetes-dashboard, skaffold, spire-server, cert-manager, flux, mattermost, prometheus-operator, k3s, fscrypt, flux-source-controller, cloud-provider-aws, trivy, kaf, helm, cilium-cli, k9s, argocd-image-updater, istio, chisel, flux-image-automation-controlle...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: nuclei, step-kms-plugin, skaffold, guac, scorecard, opentofu, act, step-issuer, terragrunt, witness, go-discover, argo-events, kubernetes, melange, telegraf, openbao, step, rancher-agent, external-dns, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy,...
GHSA-JPPX-RXG9-JMRX vulnerabilities
Vulnerabilities for packages: aactl, kubernetes-dashboard, spire-server, cert-manager, flux, mattermost, prometheus-operator, k3s, docker-cli-buildx, fscrypt, cloud-provider-aws, buildah, podman, kaf, helm, cilium-cli, istio, kubernetes, falco-no-driver, cilium, loki, containerd, kyverno, zot,...
kas's late signature validation may allow unnoticed repository manipulations
Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...
PT-2026-46846
Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...
Improper Verification of Cryptographic Signature
Overview kas is a Setup tool for bitbake based projects Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the process of checking out git repositories using commit IDs. An attacker can cause users to check out a malicious branch by creating a...
kas checks out SHA-like git branches as valid commits
Impact When relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch of the same name from this repository. This implies that the...
PT-2026-45483
Name of the Vulnerable Software and Affected Versions kas versions prior to 5.3 Description Users relying exclusively on a git commit ID SHA-1 or SHA-256 to verify if a repository checkout matches a validated state in a kas configuration may be deceived into checking out a branch with the same...
kernel: net/sched: cls_u32: use skb_header_pointer_careful()
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Kim provided a report and a repro fooling u32classify: BUG: KASAN:...
GHSA-J88V-2CHJ-QFWX vulnerabilities
Vulnerabilities for packages: spire-server, steampipe, sftpgo-plugin-eventstore, cerbos, timescaledb-parallel-copy, step-ca, hydra, cloudprober, kine, ferretdb, openfga, juicefs, gitness, k3s, step-issuer, splunk-otel-collector, sftpgo-plugin-eventsearch, kuma, temporal, rke2-cloud-provider,...
kernel: net/sched: cls_u32: use skb_header_pointer_careful()
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Kim provided a report and a repro fooling u32classify: BUG: KASAN:...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: step-kms-plugin, opentofu, metacontroller, rancher-fleet, kubernetes-csi-external-health-monitor, tailscale, kubernetes-dashboard-metrics-scraper, kubernetes-event-exporter, envoy-ratelimit, kafka-proxy, kubernetes-csi-node-driver-registrar, incert, swagger,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: vault-env, step-kms-plugin, cert-manager-cmctl, opentofu, crossplane-provider-aws-rds, contour, azcopy, boring-registry, kubernetes-csi-external-health-monitor, apisix-ingress-controller, vault-benchmark, gitness, cluster-autoscaler, step-issuer, terragrunt,...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: vault-env, step-kms-plugin, cert-manager-cmctl, opentofu, crossplane-provider-aws-rds, contour, azcopy, boring-registry, kubernetes-csi-external-health-monitor, apisix-ingress-controller, vault-benchmark, gitness, cluster-autoscaler, step-issuer, terragrunt,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: step-kms-plugin, opentofu, metacontroller, tailscale, kubernetes-csi-external-health-monitor, kubernetes-dashboard-metrics-scraper, nri-kubernetes, kubernetes-event-exporter, kafka-proxy, kubernetes-csi-node-driver-registrar, cluster-api-aws-controller,...