trivy-enforcer

trivy-enforcer EXPERIMENTAL Kubernetes Operator for Image Assurance It works as Admission Controller protecting unsafe images from being deployed Custom Controller watching ImageVulnerability CRD and scanning the image in the custom resource automatically Setup root@kitploit: $ kubectl apply -f...

Important: Red Hat Security Advisory: VolSync v0.16 security fixes and container updates

VolSync v0.16 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: VolSync v0.15 security fixes and container updates

VolSync v0.15 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2026-40564

CVE-2026-40564: SSRF via FlinkSessionJob.spec.job.jarURI in flink-kubernetes-operator The Apache Flink Kubernetes Operator does not check the spec.job.jarURI field on FlinkSessionJob or FlinkDeployment resources. Anyone who can create one of those resources can set jarURI to any URL. When the...

CVE-2026-81303 Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname

A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName value from the Hawtio custom resource directly into the Route spec without validation or authorization checks. A namespace edit user, who...

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

EUVD-2026-74295

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-77968 Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccount

A flaw was found in hawtio-operator. The operator's ClusterRole grants secrets: create, get, list, update, watch across all namespaces. While the operator uses a controller-runtime label-selector cache as a memory optimization, the ServiceAccount token authorizes read access to every Secret in th...

CVE-2026-19274

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 contains a vulnerability in the Instana Agent Operator where cluster-scoped RBAC objects are keyed solely by the bare Custom Resource name with no namespace disambiguation. An authenticated Kubernetes tenant can exploit this by ...

Important: Red Hat Security Advisory: Submariner v0.24 security fixes and container updates

Submariner v0.24 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, openfga, fluent-operator, metallb, spqr, kubernetes-csi-external-health-monitor, node-feature-discovery, grafana, cloud-provider-aws, keda, k3s, kapp-controller, kyverno-notation-aws, tetragon, opentelemetry-operator,...

GO-2025-3690 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-operator-fips...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: syft, scorecard, go-licenses, melange, nuclei, kargo, k9s, gitea, pulumi-language-yaml, argo-events, grype, k8sgpt, wolfictl, flux-image-automation-controller, apko, gptscript, grafana-alloy, dagger, argocd-image-updater, kubevela, trivy, crossplane, chezmoi, kots,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: syft, scorecard, go-licenses, melange, nuclei, kargo, k9s, gitea, pulumi-language-yaml, argo-events, grype, k8sgpt, wolfictl, flux-image-automation-controller, apko, gptscript, grafana-alloy, dagger, argocd-image-updater, kubevela, trivy, crossplane, chezmoi, kots,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: syft, scorecard, gitlab-runner, melange, nuclei, kargo, k9s, teleport, gitea, pulumi-language-yaml, argo-events, grype, gomplate, external-secrets-operator, wolfictl, flux-image-automation-controller, apko, gptscript, grafana-alloy, steampipe, dagger,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: redis-operator, dbmate, docker-machine-driver-linode, go-licenses, scorecard, azure-workload-identity-webhook, minio-operator, aws-sigv4-proxy, kuberlr, spire-controller-manager, clickhouse-operator, crossplane-provider-aws-cloudformation, hey, grpcurl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, scorecard, nuclei, k3s, kargo, spire-server, flux-image-reflector-controller, kubernetes-event-exporter, gh, step-ca, argo-events, policy-controller, rekor, gomplate, flux-image-automation-controller, ksops, neuvector-sigstore-interface,...

CLEANSTART-2026-BB29139 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r2

Package rabbitmq-messaging-topology-operator version 1.16.0-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-YR40466 Security fixes in tigera-operator 1.39.3-r1

Package tigera-operator version 1.39.3-r1 fixes 17 vulnerabilities: CVE-2026-53713, CVE-2026-53714, CVE-2026-53715, CVE-2026-53716, CVE-2026-53717...