PT-2026-28442

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 3.6.11 and 3.7.0-ea.2 Description Traefik’s Knative provider constructs router rules by incorporating user-provided values into rule expressions without proper sanitization. Specifically, the rules.hosts field in...

GHSA-3CQM-MF7H-PRRJ vulnerabilities

Vulnerabilities for packages: s3proxy-fips, knative-kafka-broker, s3proxy...

CVE-2021-0341 vulnerabilities

Vulnerabilities for packages: s3proxy-fips, knative-kafka-broker, s3proxy...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, kubernetes-event-exporter, metrics-server, rancher-webhook-fips, opentelemetry-collector, policy-controller, prometheus-postgres-exporter-fips, promxy, k6-fips, portieris, kubernetes-replicator-fips, thanos-operator, gitea, spicedb-operator-fips,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, nri-kubernetes, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, nri-memcached, oras-fips, rancher-webhook-fips, opentelemetry-collector, policy-controller, prometheus-postgres-exporter-fips, go-licenses, sftpgo,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, nri-kubernetes, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, nri-memcached, oras-fips, rancher-webhook-fips, opentelemetry-collector, policy-controller, prometheus-postgres-exporter-fips, go-licenses, sftpgo,...

EUVD-2023-3019

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: bom, rancher, eck-operator, envconsul, nri-memcached, flux, gatekeeper, neuvector, node-problem-detector, trivy, cerbos, ini-file, render-template, terraform-mcp-server, portieris, thanos-operator, aws-privateca-issuer, cloud-sql-proxy, falcoctl, cis-operator,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter-fips, yace-fips, newrelic-fluent-bit-output, azurefile-csi-fips, dagdotdev, cloud-provider-aws-fips, lvm-driver, container-object-storage-interface, php-fpmexporter, gostatsd, k8sgpt-operator, modelmesh-runtime-adapter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter-fips, yace-fips, newrelic-fluent-bit-output, azurefile-csi-fips, dagdotdev, cloud-provider-aws-fips, lvm-driver, container-object-storage-interface, php-fpmexporter, gostatsd, k8sgpt-operator, modelmesh-runtime-adapter,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, victoriametrics-operator, metrics-server, nri-memcached, rancher-webhook-fips, cert-manager-cmctl, logstash-exporter, neuvector, opentelemetry-collector, policy-controller, prometheus-postgres-exporter-fips, cerbos, ini-file, lazygit, fixuid,...

GO-2023-2355 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving...

GHSA-99JV-8292-2HPM eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations

Impact The eventing-gitlab cluster-local server doesn't set ReadHeaderTimeout‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as a Slowloris‬...

eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations

Impact The eventing-gitlab cluster-local server doesn't set ReadHeaderTimeout‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as a Slowloris‬...

Denial Of Service (DoS)

github.com/knative-extensions/eventing-github/ is vulnerable to Denial Of Service DoS. The vulnerability is caused due to missing ReadHeaderTimeout‬‭ setting in the server. This could lead to a DDoS attack, where a large number of users send requests causing it to hang...

GHSA-V7HC-87JC-QRRR eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations

Impact The eventing-github cluster-local server doesn't set ReadHeaderTimeout‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as a Slowloris‬...

eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations

Impact The eventing-github cluster-local server doesn't set ReadHeaderTimeout‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as a Slowloris‬...

The vulnerability of the Knative Serving deployment and application management tool, related to uncontrolled resource consumption, allows a attacker to cause service failures.

The vulnerability of the Knative Serving deployment and application management tool is related to an uncontrolled resource consumption when processing endpoints in the /metrics directory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-48713

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...

Design/Logic Flaw

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...