GHSA-XX8C-M748-XR4J vulnerabilities

Vulnerabilities for packages: kubernetes...

CVE-2016-7075 vulnerabilities

Vulnerabilities for packages: kubernetes...

CVE-2015-7561 vulnerabilities

Vulnerabilities for packages: kubernetes...

CVE-2016-1906 vulnerabilities

Vulnerabilities for packages: kubernetes...

CVE-2016-1905 vulnerabilities

Vulnerabilities for packages: kubernetes...

GHSA-7W66-J2R2-VM3P vulnerabilities

Vulnerabilities for packages: kubernetes...

PT-2026-5760

Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to v1.13.7 ingress-nginx versions 1.14.0 through 1.14.3 Description The nginx.ingress.kubernetes.io/auth-method Ingress annotation in ingress-nginx can be exploited to inject configuration into nginx. This can lead...

PT-2026-5761

Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to v1.13.7 ingress-nginx versions 1.14.0 through 1.14.2 Description The rules.http.paths.path Ingress field in ingress-nginx can be exploited to inject configuration into nginx. This can result in arbitrary code...

PT-2026-5763

Name of the Vulnerable Software and Affected Versions ingress-nginx affected versions not specified Description A denial of service condition exists in the validating admission controller feature. Sending large requests to the validating admission controller can lead to excessive memory...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: kuma, aactl, flux-notification-controller, aws-flb-cloudwatch-fips, runc, k3s, ingress-nginx-controller, thanos-operator-fips, fuse-overlayfs-snapshotter, gitlab-workhorse-ce, k9s-fips, xeol, beats, tfsec, kube-logging-logging-operator, vale,...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: kuma, aactl, flux-notification-controller, aws-flb-cloudwatch-fips, runc, k3s, ingress-nginx-controller, thanos-operator-fips, fuse-overlayfs-snapshotter, gitlab-workhorse-ce, k9s-fips, xeol, beats, tfsec, kube-logging-logging-operator, vale,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: nri-jmx, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, conjur-cli, minio-object-browser, vertical-pod-autoscaler, gitleaks, restic, crossplane-provider-aws-s3, kubelet-csr-approver, sftpgo-plugin-geoipfilter, pvc-autoresizer, wave, grafana-operator,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: go-md2man, bom, helm-docs, conjur-cli, restic, src-fingerprint, temporal-ui-server, linkerd2-proxy-init, falcosidekick, terraform-docs, kubernetes-dns-node-cache, docker-machine-driver-linode, crossplane-provider-aws-firehose, k8sgateway, kubeflow, ghaudit, kustomize...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: go-md2man, bom, helm-docs, conjur-cli, restic, src-fingerprint, temporal-ui-server, linkerd2-proxy-init, falcosidekick, terraform-docs, kubernetes-dns-node-cache, docker-machine-driver-linode, crossplane-provider-aws-firehose, k8sgateway, kubeflow, ghaudit, kustomize...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: go-md2man, bom, helm-docs, conjur-cli, restic, src-fingerprint, temporal-ui-server, linkerd2-proxy-init, falcosidekick, terraform-docs, kubernetes-dns-node-cache, docker-machine-driver-linode, crossplane-provider-aws-firehose, k8sgateway, kubeflow, ghaudit, kustomize...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, conjur-cli, minio-object-browser, vertical-pod-autoscaler, gitleaks, restic, crossplane-provider-aws-s3, kubelet-csr-approver, sftpgo-plugin-geoipfilter, pvc-autoresizer, wave, grafana-operator, spegel,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: nri-jmx, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, conjur-cli, minio-object-browser, vertical-pod-autoscaler, gitleaks, restic, crossplane-provider-aws-s3, kubelet-csr-approver, sftpgo-plugin-geoipfilter, pvc-autoresizer, wave, grafana-operator,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: hubble-ui, fleet-server, flux-notification-controller, kube-logging-operator, dex, runc, prometheus-beat-exporter, vault-csi-provider, longhorn-cli-fips, fuse-overlayfs-snapshotter, cilium-certgen, policy-controller-fips, src-fingerprint, sriov-network-device-plugin,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: hubble-ui, fleet-server, flux-notification-controller, kube-logging-operator, dex, runc, prometheus-beat-exporter, vault-csi-provider, longhorn-cli-fips, fuse-overlayfs-snapshotter, cilium-certgen, policy-controller-fips, src-fingerprint, sriov-network-device-plugin,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: hubble-ui, fleet-server, flux-notification-controller, kube-logging-operator, dex, runc, prometheus-beat-exporter, vault-csi-provider, nri-jmx, longhorn-cli-fips, fuse-overlayfs-snapshotter, cilium-certgen, policy-controller-fips, src-fingerprint,...