Security update for kubernetes-old

This update for kubernetes-old rebuilds it against the current go 1.25 security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE...

SUSE-SU-2026:1489-1 Security update for kubernetes-old

This update for kubernetes-old rebuilds it against the current go 1.25 security release...

autopoc

AutoPoC Automated proof-of-concept deployments on OpenShift...

CVE-2026-33816 vulnerabilities

Vulnerabilities for packages: k3s, envoy-gateway, spire-server, kots, kine...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kargo, gitlab-kas, k8sgpt, redis-operator, cloudnative-pg, argocd-image-updater, kpt, cri-tools, velero, teleport, postgres-operator, verticadb-operator, docker-cli-buildx, sonobuoy, aws-node-termination-handler, hubble, k8ssandra-client, kubernetes-dashboard-api,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kargo, gitlab-kas, k8sgpt, redis-operator, cloudnative-pg, argocd-image-updater, kpt, cri-tools, velero, teleport, postgres-operator, verticadb-operator, docker-cli-buildx, sonobuoy, aws-node-termination-handler, hubble, k8ssandra-client, kubernetes-dashboard-api,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: gitaly, kubernetes-csi-external-attacher, kubernetes-csi-node-driver-registrar, knative-serving, tailscale, gitlab-kas, cadvisor, container-object-storage-interface, influx, xcover, telegraf, delve, cni-plugins, prometheus-operator, apisix-ingress-controller,...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: gitaly, kubernetes-csi-external-attacher, kubernetes-csi-node-driver-registrar, knative-serving, tailscale, gitlab-kas, cadvisor, container-object-storage-interface, influx, xcover, telegraf, delve, cni-plugins, prometheus-operator, apisix-ingress-controller,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: gitaly, kubernetes-csi-external-attacher, kubernetes-csi-node-driver-registrar, knative-serving, tailscale, gitlab-kas, cadvisor, container-object-storage-interface, influx, xcover, telegraf, delve, cni-plugins, prometheus-operator, apisix-ingress-controller,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: gitaly, kubernetes-csi-external-attacher, kubernetes-csi-node-driver-registrar, knative-serving, tailscale, gitlab-kas, cadvisor, container-object-storage-interface, influx, xcover, telegraf, delve, cni-plugins, prometheus-operator, apisix-ingress-controller,...

CVE-2026-6437

creationtimestamp| type| source ---|---|--- 2026-04-17 19:48:06+00:00| seen| https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mjpowzo7s4h2...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, scanner-test-golang-vulnerability-fixed, tetragon-fips, kubernetes, gitaly-fips, nri-mssql, envoy-gateway, traefik, vault, tigera-operator, k3s, argo-cd-fips, kyverno, commercial-grafana, quic-go-fips, mattermost,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kubernetes, hubble-fips, envoy-gateway, k9s, zarf, tigera-operator, k3s, argo-cd-fips, commercial-grafana, trident-fips, longhorn-cli, percona-server-mongodb-operator, percona-xtradb-cluster-operator-fips, plugin-barman-cloud, dynamic-localpv-provisioner, eks-distro,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, scanner-test-golang-vulnerability-fixed, tetragon-fips, kubernetes, gitaly-fips, nri-mssql, envoy-gateway, traefik, vault, tigera-operator, k3s, argo-cd-fips, kyverno, commercial-grafana, quic-go-fips, mattermost,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, scanner-test-golang-vulnerability-fixed, tetragon-fips, kubernetes, gitaly-fips, nri-mssql, envoy-gateway, traefik, vault, tigera-operator, k3s, argo-cd-fips, kyverno, commercial-grafana, quic-go-fips, mattermost,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubernetes, hubble-fips, envoy-gateway, k9s, zarf, tigera-operator, k3s, argo-cd-fips, commercial-grafana, trident-fips, longhorn-cli, percona-server-mongodb-operator, percona-xtradb-cluster-operator-fips, plugin-barman-cloud, dynamic-localpv-provisioner, eks-distro,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, scanner-test-golang-vulnerability-fixed, tetragon-fips, kubernetes, gitaly-fips, nri-mssql, envoy-gateway, traefik, vault, tigera-operator, k3s, argo-cd-fips, kyverno, commercial-grafana, quic-go-fips, mattermost,...

Apache Tomcat 9.0.92 < 9.0.117 Improper Authentication Vulnerability (CVE-2026-34500)

The version of Tomcat installed on the remote host is 9.0.92 prior to 9.0.117. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.117security-9 advisory. - CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled and...

Kyverno: ServiceAccount token leaked to external servers via apiCall service URL

Summary Kyverno's apiCall feature in ClusterPolicy automatically attaches the admission controller's ServiceAccount token to outgoing HTTP requests. The service URL has no validation — it can point anywhere, including attacker-controlled servers. Since the admission controller SA has permissions ...

CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...