10609 matches found
GHSA-7HFW-R8QC-89V4 vulnerabilities
Vulnerabilities for packages: flux-image-reflector-controller, flux-helm-controller, flux-operator-fips, victorialogs, flux-fips, terragrunt, polaris, grafana-operator-fips, dkron, steampipe, podinfo, flux-source-watcher, temporal-fips, cert-manager-fips, localstack, librechat, go,...
GO-2026-4565 Sealed Secrets for Kubernetes: Rotate API Allows Scope Widening from Strict/Namespace-Wide to Cluster-Wide via Untrusted Template Annotations in github.com/bitnami-labs/sealed-secrets
Sealed Secrets for Kubernetes: Rotate API Allows Scope Widening from Strict/Namespace-Wide to Cluster-Wide via Untrusted Template Annotations in github.com/bitnami-labs/sealed-secrets...
CVE-2026-29773
Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to deploy namespaced AdmissionPolicies and AdmissionPolicyGroups in their Namespaces. One of Kubewarden promises is that configured users can deploy namespaced policies in a safe manner,...
CVE-2026-3288
creationtimestamp| type| source ---|---|--- 2026-03-10 14:35:26+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/kubernetes-security-advisory-av26-208 2026-03-10 16:00:36+00:00| seen| https://gist.github.com/ichintu/18b9a09140a4dbb6aab50fdd24d38fb4 2026-03-17 15:07:42+00:00| seen|...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: vault-benchmark, mc, newrelic-infrastructure-agent, sftpgo-plugin-auth, trino, crossplane-provider-aws-eks, mattermost, rook, prometheus-pushgateway, argo-cd, chartmuseum, secrets-store-csi-driver-provider-azure, kubernetes-csi-livenessprobe, kubevela,...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: vault-benchmark, mc, newrelic-infrastructure-agent, sftpgo-plugin-auth, trino, crossplane-provider-aws-eks, mattermost, rook, prometheus-pushgateway, argo-cd, chartmuseum, secrets-store-csi-driver-provider-azure, kubernetes-csi-livenessprobe, kubevela,...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: vault-benchmark, vale, mattermost, newrelic-k8s-metadata-injection, rook, argo-cd, secrets-store-csi-driver-provider-azure, crossplane-provider-aws-route53, undock, aws-privateca-issuer, rabbitmq-default-user-credential-updater, terraform-provider-google,...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: vault-benchmark, vale, mattermost, newrelic-k8s-metadata-injection, rook, argo-cd, secrets-store-csi-driver-provider-azure, crossplane-provider-aws-route53, undock, aws-privateca-issuer, rabbitmq-default-user-credential-updater, terraform-provider-google,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, cephcsi-fips, step-fips, apisix-ingress-controller, gatekeeper, langfuse-fips, crossplane-aws-provider-fips, crossplane-provider-aws-eks, hubble-fips, tkn, blob-csi, gitlab-operator-fips, grafana,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, nri-kubernetes-fips, cephcsi-fips, clickhouse-operator, aws-iam-authenticator-fips, step-fips, apisix-ingress-controller, gatekeeper, langfuse-fips, crossplane-aws-provider-fips,...
CVE-2026-27139 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, nri-kubernetes-fips, cephcsi-fips, clickhouse-operator, aws-iam-authenticator-fips, step-fips, apisix-ingress-controller, gatekeeper, langfuse-fips, crossplane-aws-provider-fips,...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, cephcsi-fips, step-fips, apisix-ingress-controller, gatekeeper, langfuse-fips, crossplane-aws-provider-fips, crossplane-provider-aws-eks, hubble-fips, tkn, blob-csi, gitlab-operator-fips, grafana,...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, nri-kubernetes-fips, cephcsi-fips, clickhouse-operator, aws-iam-authenticator-fips, step-fips, apisix-ingress-controller, gatekeeper, langfuse-fips, crossplane-aws-provider-fips,...
ROS-20260310-73-0048
Vulnerability in golang-k8s-ingress-nginx related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the deprecated host-callback APIs kubernetes/ingresses, kubernetes/namespaces, and kubernetes/services. An attacker can gain unauthorized read access to Ingresses, Namespaces, and Services resources across al...
CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-27
CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-27. A patched version of the package is available...
CVE-2025-58190 affecting package kubernetes for versions less than 1.28.4-25
CVE-2025-58190 affecting package kubernetes for versions less than 1.28.4-25. A patched version of the package is available...
CVE-2025-30204 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-27
CVE-2025-30204 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-27. A patched version of the package is available...
