can-ctr-escape-cve-2022-0492

Una imagen de contenedor que prueba si un entorno de contenedor es vulnerable a escapes mediante CVE-2022-0492. Es mejor ejecutarlo en un contenedor nuevo que ejecute una imagen construida con: root@kitploit: $ cd can-ctr-escape-cve-2022-0492 $ docker build -t can-ctr-escape-cve-2022-0492:latest...

Elastic Cloud on Kubernetes 3.5.0 Security Update (ESA-2026-145)

Incorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of Data Incorrect Authorization CWE-863 in Elastic Cloud on Kubernetes ECK can lead to unauthorized modification of data via Metadata Spoofing CAPEC-690. An actor holding limited Kubernetes permissions...

AZL-99252 CVE-2026-84304 affecting package kubernetes 1.30.10-27

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

CVE-2026-32637

A flaw was found in Velero, an open-source tool for managing Kubernetes backups. An attacker who compromises the backup object-storage backend can upload a specially crafted malicious backup file. During the restore process, this malicious file can exploit a path traversal vulnerability to...

CVE-2025-15613

Kyverno before v1.13.4 is vulnerable to server-side request forgery SSRF via its Service Call functionality. An attacker with permission to create Kyverno ClusterPolicies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster...

CVE-2025-15613 Kyverno before v1.13.4 SSRF via Service Call

Kyverno before v1.13.4 is vulnerable to server-side request forgery SSRF via its Service Call functionality. An attacker with permission to create Kyverno ClusterPolicies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster...

CVE-2025-15613 Kyverno before v1.13.4 SSRF via Service Call

Kyverno before v1.13.4 is vulnerable to server-side request forgery SSRF via its Service Call functionality. An attacker with permission to create Kyverno ClusterPolicies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster...

EUVD-2025-210816

Kyverno before v1.13.4 is vulnerable to server-side request forgery SSRF via its Service Call functionality. An attacker with permission to create Kyverno ClusterPolicies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster...

CLEANSTART-2026-OR64895 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r2

Package kubernetes-csi-external-provisioner-fips version 6.2.1-r2 fixes 21 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-IZ37366 Security fixes in kubernetes-event-exporter 1.6.1-r2

Package kubernetes-event-exporter version 1.6.1-r2 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-DR03869 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r1

Package kubernetes-csi-external-provisioner-fips version 6.2.1-r1 fixes 29 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-JJ72716 Security fixes in kubernetes-event-exporter 1.6.1-r1

Package kubernetes-event-exporter version 1.6.1-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-DL23987 Security fixes in kubernetes-event-exporter 1.5-r1

Package kubernetes-event-exporter version 1.5-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-HV38878 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r3

Package kubernetes-csi-external-provisioner-fips version 6.2.1-r3 fixes 27 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-QH63910 Security fixes in kubernetes-event-exporter 1.6.1-r3

Package kubernetes-event-exporter version 1.6.1-r3 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-XC36921 Security fixes in kubernetes-event-exporter 1.5-r3

Package kubernetes-event-exporter version 1.5-r3 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-ZT42186 Security fixes in kubernetes-event-exporter 1.5-r2

Package kubernetes-event-exporter version 1.5-r2 fixes 1 vulnerabilities: CVE-2026-46600...

testkube v2.13.1

The Open Testing Platform for AI-driven Engineering Teams Testkube provides a single platform for defining, running and analyzing automated tests, using your existing testing tools/scripts, running in your Kubernetes infrastructure...

poc-container-escape

poccontainerescape Enumeración y explotación de vectores...

GHSA-GJHQ-GJFW-99MQ vulnerabilities

Vulnerabilities for packages: cilium, flux-notification-controller, argocd-image-updater, kaf, kubescape, telegraf, gitness, prometheus-operator, chisel, falco-no-driver, flux-source-controller, loki, nerdctl, external-dns, kubevela, aactl, flux-image-automation-controller, containerd, k9s, k3s,...