10644 matches found
CLEANSTART-2026-XC36921 Security fixes in kubernetes-event-exporter 1.5-r3
Package kubernetes-event-exporter version 1.5-r3 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-41178, ghsa-259r-337f-4rfw...
testkube v2.13.1
The Open Testing Platform for AI-driven Engineering Teams Testkube provides a single platform for defining, running and analyzing automated tests, using your existing testing tools/scripts, running in your Kubernetes infrastructure...
poc-container-escape
poccontainerescape Enumeración y explotación de vectores...
GHSA-GJHQ-GJFW-99MQ vulnerabilities
Vulnerabilities for packages: aactl, telegraf, argocd-image-updater, flux-notification-controller, snyk-cli, helm, spire-server, kyverno, flux-image-automation-controller, skaffold, kaf, kubernetes, kubevela, loki, rclone, gitness, falco-no-driver, fscrypt, kubernetes-dashboard, containerd, kine,...
GHSA-GJHQ-GJFW-99MQ vulnerabilities
Vulnerabilities for packages: skaffold-fips, kyverno, beats, cloudbeat-fips, zitadel, rclone, tbot, coder-fips, kubevela, omnictl-multiarch, frankenphp-8.5, upwind-agent, drone, frankenphp-8.2, crossplane-cli-fips, flux-source-controller-fips, argocd-image-updater, opentelemetry-collector-k8s,...
krane v0.1.6
Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...
CVE-2026-56854 vulnerabilities
Vulnerabilities for packages: skaffold-fips, kyverno, beats, cloudbeat-fips, zitadel, rclone, tbot, coder-fips, kubevela, omnictl-multiarch, frankenphp-8.5, upwind-agent, drone, frankenphp-8.2, crossplane-cli-fips, flux-source-controller-fips, argocd-image-updater, opentelemetry-collector-k8s,...
GO-2026-6303 vulnerabilities
Vulnerabilities for packages: skaffold-fips, kyverno, beats, cloudbeat-fips, zitadel, rclone, tbot, coder-fips, kubevela, omnictl-multiarch, frankenphp-8.5, upwind-agent, drone, frankenphp-8.2, crossplane-cli-fips, flux-source-controller-fips, argocd-image-updater, opentelemetry-collector-k8s,...
CVE-2026-56854 vulnerabilities
Vulnerabilities for packages: aactl, telegraf, argocd-image-updater, flux-notification-controller, snyk-cli, helm, spire-server, kyverno, flux-image-automation-controller, skaffold, kaf, kubernetes, kubevela, loki, rclone, gitness, falco-no-driver, fscrypt, kubernetes-dashboard, containerd, kine,...
GO-2026-6303 vulnerabilities
Vulnerabilities for packages: aactl, telegraf, argocd-image-updater, flux-notification-controller, snyk-cli, helm, spire-server, kyverno, flux-image-automation-controller, skaffold, kaf, kubernetes, kubevela, loki, rclone, gitness, falco-no-driver, fscrypt, kubernetes-dashboard, containerd, kine,...
Ingress-Nginx Controller - Remote Code Execution
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...
CVE-2026-82277
Argo Rollouts dashboard through 1.10.0 binds to all network interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection . Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and Retry...
AZL-98379 CVE-2026-37236 affecting package kubernetes 1.30.10-27
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...
PT-2026-83116
A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user'...
PT-2026-83115
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...
CVE-2026-75889
Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...
CVE-2026-75889 CVE-2026-75889 CVE Record
Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...
CVE-2026-75889
Grafana Alloy's prometheus.operator.servicemonitors component is vulnerable to arbitrary local file disclosure via the bearerTokenFile field. A user with ServiceMonitor write access in a watched namespace can point this field at any file readable by the Alloy process; Alloy then sends the file's ...
CVE-2026-75889 CVE-2026-75889 CVE Record
Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...
EUVD-2026-67162
Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...