CVE-2026-54761

Traefik vulnerability CVE-2026-54761 affects the Kubernetes Gateway provider: prior to 3.6.21 and 3.7.5, the crossProviderNamespaces allowlist is checked against backendRef.namespace instead of the HTTPRoute’s own namespace, enabling an attacker in a non-allowlisted namespace to reference interna...

Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12

Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.6.12 release that simplify the process of...

Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.6.12

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.6.12 release that simplify the process of...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, kube-fluentd-operator, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, logstash-fips, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby4.0-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset,...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: nemo, lmcache-cuda-12.8, jupyter-all-spark-notebook, openstack-horizon-2025.2, openstack-horizon-2025.1-fips, openstack-kolla-toolbox-2025.2, openstack-glance-2026.1-fips, openstack-horizon-2025.2-fips, openstack-kolla-toolbox-2026.1, openstack-placement-2025.2,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, neuvector, kgateway, envoy-gateway, docker-compose, kubevela-fips, helm-push, spegel, zarf-fips, harvester, google-osconfig-agent, skaffold, gatekeeper, headlamp, xeol, helm-operator, zot, linkerd2-fips, crossplane, chainctl-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: argo-cd, buildah-fips, guac, gitlab-cng, prometheus-mongodb-exporter, docker-compose, flux, gitsign, metrics-server-fips, kube-conformance, spegel, kube-rbac-proxy-fips, blob-csi, stunner-gateway-operator, google-osconfig-agent, net-kourier-fips, longhorn-manager,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, neuvector, kgateway, envoy-gateway, docker-compose, kubevela-fips, helm-push, spegel, zarf-fips, harvester, google-osconfig-agent, skaffold, gatekeeper, headlamp, xeol, helm-operator, zot, linkerd2-fips, crossplane, chainctl-fips,...

On-Premises API Security on Kubernetes: What It Actually Looks Like in Practice

Let’s Talk About Where Your APIs Actually Run Quick answer: On-premises API security keeps API discovery, detection, and enforcement inside your own perimeter instead of a third-party cloud—the model regulated industries need. Deploying it natively on Kubernetes sidecar sensors → a discovery...

SUSE SLES15 Security Update : kubernetes-old (SUSE-SU-2026:2460-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2460-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265747. -...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, py3-cassandra-medusa, py3-pipenv, superset, datadog-agent, mitmproxy, dask-kubernetes, airflow, pypy-3.11...

[SECURITY] Fedora 43 Update: kubernetes1.35-1.35.6-1.fc43

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...

[SECURITY] Fedora 43 Update: kubernetes1.34-1.34.9-1.fc43

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...

[SECURITY] Fedora 43 Update: kubernetes1.33-1.33.13-1.fc43

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...

[SECURITY] Fedora 44 Update: kubernetes1.35-1.35.6-1.fc44

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...

[SECURITY] Fedora 44 Update: kubernetes1.34-1.34.9-1.fc44

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...

[SECURITY] Fedora 44 Update: kubernetes1.33-1.33.13-1.fc44

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...

Fedora 44 : kubernetes1.33 (2026-da02662d41)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-da02662d41 advisory. - Update to release 1.33.13 - Resolves: rhbz2467604 - Upstream fix Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 44 : kubernetes1.34 (2026-eee09dc43b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eee09dc43b advisory. - Update to release v1.34.9 - Resolves: rhbz2467605 - Upstream fixes Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : kubernetes1.34 (2026-88ab77d111)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-88ab77d111 advisory. - Update to release v1.34.9 - Resolves: rhbz2467605 - Upstream fixes Tenable has extracted the preceding description block directly from the Fedora security...