CVE-2026-53487

Kite, a Kubernetes dashboard, has an authenticated cluster RBAC bypass in the /api/v1/overview endpoint prior to version 0.12.3. The root cause is that the overview route is registered before middleware.RBACMiddleware(), and the GetOverview handler only verifies len(user.Roles) > 0 rather than...

Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, crossplane-provider-aws-cloudfront, metacontroller, prometheus-elasticsearch-exporter, kor, kots, kubernetes-event-exporter, ip-masq-agent, sigstore-scaffolding, terraform-provider-sendgrid-fips, prometheus-node-exporter-fips,...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kubernetes-dashboard, aactl, bom, argocd-image-updater-fips, kpt...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: aactl, bom, kubernetes-dashboard, kpt, argocd-image-updater...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: caddy, sigstore-scaffolding, zot, k3s, kargo, weaviate, aactl, frp, zarf, oauth2-proxy, dex, step-ca, goreleaser, kubernetes-dashboard, wolfictl, kubescape, temporal, argo-workflows, terragrunt, ko, bank-vaults, falcoctl, policy-controller, step, grpc-health-probe,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, eksctl, crossplane-provider-aws-eks, gitea, buildkitd, kaf, docker-cli-buildx, crossplane-provider-aws-firehose, argocd-image-updater, gitlab-pages, terragrunt, ko, prometheus, syft, crossplane-provider-aws-cloudfront,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: zot, kubernetes, k3s, datadog-agent, aactl, dask-gateway, external-dns, kaf, argo-cd, kubernetes-dashboard, cloud-provider-aws, snyk-cli, k8s-device-plugin, prometheus-operator, fuse-overlayfs-snapshotter, kubescape, gitlab-pages, redka, flux, libnvidia-container,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: zot, kubernetes, gitea, datadog-agent, k3s, aactl, external-dns, nfpm, kaf, nuclei, argo-cd, zarf, witness, pulumi, kubernetes-dashboard, cloud-provider-aws, argocd-image-updater, snyk-cli, wolfictl, prometheus-operator, kubescape, k9s, flux, gptscript, terragrunt,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: grpcurl, mage, smarter-device-manager, aactl, gosu, kubernetes-dashboard-metrics-scraper, gke-gcloud-auth-plugin, docker-credential-ecr-login, cortex, influx, cass-operator, nats, nsc, gobuster, docker-cli, k3d, petname, ctop, vertical-pod-autoscaler, amass,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: vale, eksctl, k3s, aactl, dask-gateway, bom, external-dns, croc, steampipe, goreleaser, headlamp, kubernetes-dashboard, ferretdb, fuse-overlayfs-snapshotter, thanos-operator, redka, timoni, src, cilium-cli, kubernetes-dashboard-api, helm-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, grpcurl, eksctl, harbor-registry, gogatekeeper, nri-mongodb, dask-gateway, frp, kuberlr, crossplane-provider-aws-firehose, kubernetes-dashboard-metrics-scraper, grafana-operator, spire-controller-manager, docker-credential-gcr,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, eksctl, harbor-registry, kubernetes-dashboard-auth, buildkitd, cluster-api-helm-controller, docker-cli-buildx, kuberlr, nri-memcached, spire-controller-manager, docker-credential-gcr, cloud-provider-vsphere, controller-gen, ko, gobuster, dive, nri-consu...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, dask-gateway, buildkitd, helm-docs, cfssl, dive, yace, timescaledb-parallel-copy, rancher-telemetry, grafana-agent-operator, kubernetes-dns-node-cache, cluster-api-gcp-controller, docker, skopeo, minio-operator, newrelic-nri-kube-events,...

CLEANSTART-2026-ZL91163 Security fixes in kubernetes-dashboard-metrics-scraper 1.2.2-r1

Package kubernetes-dashboard-metrics-scraper version 1.2.2-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139...

CLEANSTART-2026-RS31344 Security fixes in kubernetes-dashboard 7.14.0-r1

Package kubernetes-dashboard version 7.14.0-r1 fixes 21 vulnerabilities: CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-MX87072 Security fixes in kubernetes-dashboard-metrics-scraper 1.2.2-r2

Package kubernetes-dashboard-metrics-scraper version 1.2.2-r2 fixes 22 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-ZB20397 Security fixes in kubernetes-dashboard-auth-fips 1.4.0-r2

Package kubernetes-dashboard-auth-fips version 1.4.0-r2 fixes 21 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-XV94237 Security fixes in kubernetes-dashboard-api 1.14.0-r1

Package kubernetes-dashboard-api version 1.14.0-r1 fixes 27 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469, CVE-2026-39820, CVE-2026-25679, CVE-2026-27143...

CLEANSTART-2026-UB53379 Security fixes in kubernetes-dashboard-fips 7.14.0-r0

Package kubernetes-dashboard-fips version 7.14.0-r0 fixes 17 vulnerabilities: CVE-2026-27140, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282...