10547 matches found
EUVD-2026-28895
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the Sync Service's ConfigMap-backed provider server/sync/synccm.go performs zero authorization checks on all CRUD operations create, read,...
CVE-2026-42297 Argo Workflows Is Missing Authorization in Sync ConfigMap Provider
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the Sync Service's ConfigMap-backed provider server/sync/synccm.go performs zero authorization checks on all CRUD operations create, read,...
CVE-2026-39819 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, terrafmt-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2,...
CVE-2026-42501 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, terrafmt-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2,...
GHSA-497X-JCXF-M478 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2, helm-fips, cloudbeat,...
CVE-2026-39817 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, terrafmt-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2,...
GHSA-QF3Q-3H68-MMH2 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, terrafmt-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2,...
GHSA-8G2R-HHVJ-MV99 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, terrafmt-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2,...
GHSA-QC64-M6C2-V4X7 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, terrafmt-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2,...
CVE-2026-33811 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2, helm-fips, cloudbeat,...
GHSA-5M4P-2GJX-P2G8 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, terrafmt-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2,...
CVE-2026-39836 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, terrafmt-fips, gitaly, terraform-provider-sendgrid-fips, authservice-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-sesv2,...
CVE-2026-33814 vulnerabilities
Vulnerabilities for packages: kro, gcp-compute-persistent-disk-csi-driver-fips, thanos-operator, kube-mgmt, nginx-kubernetes-ingress, terraform-provider-grafana-fips, cert-exporter-fips, crossplane-provider-aws-guardduty, k3s, aws-flb-kinesis-fips, crossplane-provider-family-azure,...
Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017390)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017390 advisory. The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0...
Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017342)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017342 advisory. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows...
Argo Workflows 安全漏洞
Argo Workflows is an open-source container-native workflow engine for Kubernetes, part of the Argo project. Versions 4.0.0 to 4.0.5 of Argo Workflows had a security vulnerability. This vulnerability stemmed from the fact that the workflow executor recorded all workpiece repository credentials in...
Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-016823)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016823 advisory. A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching...
Argo Workflows 安全漏洞
Argo Workflows is an open-source container-native workflow engine for Kubernetes, part of the Argo project. Versions 4.0.0 to 4.0.5 of Argo Workflows had a security vulnerability. This vulnerability stemmed from the ConfigMap-backed provider in the Sync Service not performing authorization checks...
Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise
A previously undocumented Linux implant codenamed Quasar Linux RAT QLNX is targeting developers' systems to establish a silent foothold as well as facilitate a broad range of post-compromise functionality, such as credential harvesting, keylogging, file manipulation, clipboard monitoring, and...
