10547 matches found
GHSA-M4PR-4J3G-9V7V vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, tempo, crossplane-function-environment-configs-fips, gitaly, knative-client, terraform-provider-sendgrid-fips, authservice-fips, helm-fips, vault-env, dynamic-localpv-provisioner, spegel, cloudbeat, aws-flb-kinesis,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, tempo, crossplane-function-environment-configs-fips, gitaly, knative-client, terraform-provider-sendgrid-fips, authservice-fips, helm-fips, vault-env, dynamic-localpv-provisioner, spegel, cloudbeat, aws-flb-kinesis,...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, tempo, crossplane-function-environment-configs-fips, gitaly, knative-client, terraform-provider-sendgrid-fips, authservice-fips, helm-fips, vault-env, dynamic-localpv-provisioner, spegel, cloudbeat, aws-flb-kinesis,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: spegel, gcp-compute-persistent-disk-csi-driver-fips, thanos-operator, cert-exporter-fips, k3s, aws-flb-kinesis-fips, crossplane-provider-family-azure, aws-eks-pod-identity-agent, prometheus-postgres-exporter, kyverno-policy-reporter-plugins-trivy-fips,...
PT-2026-32095
Name of the Vulnerable Software and Affected Versions Kubernetes affected versions not specified Description The Kubernetes CSI Driver for SMB contains a path traversal issue via the subDir parameter. This could allow unintended directories on the SMB server to be deleted. Recommendations At the...
SUSE CVE-2026-34487
Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.13 through 9.0.116. User...
CVE-2026-35205
A flaw was found in Helm, a package manager for Kubernetes. A remote attacker could exploit this vulnerability by providing a malicious plugin that lacks a provenance file. Even when signature verification is enabled, Helm would incorrectly install this unverified plugin, bypassing critical...
CVE-2026-35204
A flaw was found in Helm, a package manager for Kubernetes. An attacker could exploit this vulnerability by providing a specially crafted Helm plugin. When such a plugin is installed or updated, Helm incorrectly processes its configuration, allowing the plugin's contents to be written to an...
EUVD-2026-21547
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the odh-dashboard component of Red Hat OpenShift AI RHOAI allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to...
CVE-2026-5483
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the odh-dashboard component of Red Hat OpenShift AI RHOAI allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to...
CSI Driver for SMB path traversal via subDir may delete unintended directories on the SMB server
CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H — Medium 6.5 A vulnerability was discovered in the Kubernetes CSI Driver for SMB where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the SMB CSI...
CVE-2026-5483
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the odh-dashboard component of Red Hat OpenShift AI RHOAI allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to...
CVE-2026-5483
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the odh-dashboard component of Red Hat OpenShift AI RHOAI allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to...
CVE-2026-5483 Odh-dashboard: odh dashboard kubernetes service account exposure
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the odh-dashboard component of Red Hat OpenShift AI RHOAI allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to...
CVE-2026-5483 Odh-dashboard: odh dashboard kubernetes service account exposure
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the odh-dashboard component of Red Hat OpenShift AI RHOAI allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to...
CVE-2026-5483
CVE-2026-5483 – Odh-dashboard component in Red Hat OpenShift AI has a flaw that allows disclosure of Kubernetes Service Account tokens through a NodeJS endpoint, enabling potential unauthorized access to Kubernetes resources. Affected product: Red Hat OpenShift AI (odh-dashboard). Root cause: inf...
EUVD-2026-20965
Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource...
CVE-2026-35206
A flaw was found in Helm, a package manager for Kubernetes. A remote attacker could exploit this vulnerability by providing a specially crafted Chart to the helm pull --untar command. This would cause the Chart's contents to be written to an unintended directory, potentially overwriting existing...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: mitmproxy, k8s-sidecar, kubeflow-pipelines-visualization-server, semgrep, dask-kubernetes, ggshield, in-toto, kubeflow-volumes-web-app, kserve, mycli, jupyter-base-notebook, kubeflow-jupyter-web-app, datadog-agent, superset, airflow, open-webui, py3-cassandra-medusa...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: mitmproxy, k8s-sidecar, kubeflow-pipelines-visualization-server, semgrep, dask-kubernetes, ggshield, in-toto, kubeflow-volumes-web-app, kserve, mycli, jupyter-base-notebook, kubeflow-jupyter-web-app, datadog-agent, superset, airflow, open-webui, py3-cassandra-medusa...