CVE-2026-54762

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in Traefik's Kubernetes Ingress NGINX provider that causes affected routes to fail open. When an Ingress explicitly enables BasicAuth or DigestAuth through the supported...

CVE-2026-54762 Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in Traefik's Kubernetes Ingress NGINX provider that causes affected routes to fail open. When an Ingress explicitly enables BasicAuth or DigestAuth through the supported...

CVE-2026-54762

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in Traefik's Kubernetes Ingress NGINX provider that causes affected routes to fail open. When an Ingress explicitly enables BasicAuth or DigestAuth through the supported...

CVE-2026-54761

Traefik vulnerability CVE-2026-54761 affects the Kubernetes Gateway provider: prior to 3.6.21 and 3.7.5, the crossProviderNamespaces allowlist is checked against backendRef.namespace instead of the HTTPRoute’s own namespace, enabling an attacker in a non-allowlisted namespace to reference interna...

CVE-2026-54761

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Traefik's Kubernetes Gateway provider affecting the crossProviderNamespaces allowlist. For HTTPRoute rules that declare multiple WRR backendRefs, Traefik evaluates the allowlis...

CVE-2026-54761 Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Traefik's Kubernetes Gateway provider affecting the crossProviderNamespaces allowlist. For HTTPRoute rules that declare multiple WRR backendRefs, Traefik evaluates the allowlis...

Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12

Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.6.12 release that simplify the process of...

Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.6.12

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.6.12 release that simplify the process of...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.2-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-rails, ruby3.4-rails, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-rails...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: mitmproxy, dbt-snowflake, dask-kubernetes, openstack-keystone-2025.1-fips, openstack-placement-2026.1-fips, wazuh-manager-fips, openstack-glance-2025.1, pypy-3.11, authentik, dbt-bigquery, awx, nemo, openstack-keystone-2025.2, openstack-placement-2025.1-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: bank-vaults, crossplane-provider-aws-s3control-fips, kube-mgmt, kube-mgmt-fips, crossplane-provider-azure-portal, eksctl, falcoctl, calico-fips, falcosidekick-fips, crossplane-provider-aws-athena, crossplane-provider-azure-orbital, elastic-agent-fips,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: rancher-helm, manifest-tool, kube-mgmt, kube-mgmt-fips, trivy-operator, crossplane-fips, eksctl, tigera-operator-fips, datadog-agent, dagger, k9s-fips, trivy, zot, kube-arangodb, chartmuseum-fips, cg, gitlab-rails-ce, packer, kargo, chaos-mesh-fips, k9s,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: rancher-helm, manifest-tool, kube-mgmt, kube-mgmt-fips, trivy-operator, crossplane-fips, eksctl, tigera-operator-fips, datadog-agent, dagger, k9s-fips, trivy, zot, kube-arangodb, chartmuseum-fips, cg, gitlab-rails-ce, packer, kargo, chaos-mesh-fips, k9s,...

On-Premises API Security on Kubernetes: What It Actually Looks Like in Practice

Let’s Talk About Where Your APIs Actually Run Quick answer: On-premises API security keeps API discovery, detection, and enforcement inside your own perimeter instead of a third-party cloud—the model regulated industries need. Deploying it natively on Kubernetes sidecar sensors → a discovery...

SUSE SLES15 Security Update : kubernetes-old (SUSE-SU-2026:2460-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2460-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265747. -...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: airflow, superset, dask-kubernetes, datadog-agent, pypy-3.11, mitmproxy, py3-pipenv...

[SECURITY] Fedora 43 Update: kubernetes1.35-1.35.6-1.fc43

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...

[SECURITY] Fedora 43 Update: kubernetes1.34-1.34.9-1.fc43

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...

[SECURITY] Fedora 43 Update: kubernetes1.33-1.33.13-1.fc43

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...

[SECURITY] Fedora 44 Update: kubernetes1.35-1.35.6-1.fc44

Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...