10637 matches found
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: spark-operator, docker-machine-driver-harvester, fzf, cloud-provider-vsphere, thanos-operator, ratify, docker-cli, envconsul, clickhouse-operator, kyverno-notation-aws, wal-g, k3d, rancher-system-upgrade-controller, aws-privateca-issuer, oauth2-proxy, kapp-controller...
CVE-2025-59824
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni and each Talos machine establish a peer-to-peer P2P SideroLink connection using WireGuard to mutually authenticate and authorize access. The...
CVE-2025-59824 Omni Wireguard SideroLink potential escape
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni and each Talos machine establish a peer-to-peer P2P SideroLink connection using WireGuard to mutually authenticate and authorize access. The...
CVE-2025-59824 Omni Wireguard SideroLink potential escape
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni and each Talos machine establish a peer-to-peer P2P SideroLink connection using WireGuard to mutually authenticate and authorize access. The...
CVE-2025-59824 Omni Wireguard SideroLink potential escape
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni and each Talos machine establish a peer-to-peer P2P SideroLink connection using WireGuard to mutually authenticate and authorize access. The...
CVE-2025-59824
The CVE CVE-2025-59824 affects Omni’s WireGuard-based SideroLink used to connect Omni to Talos machines. The issue: the WireGuard interface validates that the source IP matches the Talos peer IPv6 address but does not validate the destination address, meaning a malicious workload on the same Kube...
CVE-2025-47910 vulnerabilities
Vulnerabilities for packages: trivy, argo-events, swagger, tekton-chains, envconsul, cloud-provider-vsphere, fulcio, gatekeeper, gcsfuse, mongo-tools, prometheus-operator, terraform-provider-azapi, azure-service-operator, wire-go, grafana-alloy, helm-set-status, docker-cli,...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: trivy, argo-events, swagger, tekton-chains, envconsul, cloud-provider-vsphere, fulcio, gatekeeper, gcsfuse, mongo-tools, prometheus-operator, terraform-provider-azapi, azure-service-operator, wire-go, grafana-alloy, helm-set-status, docker-cli,...
PT-2025-39337
Name of the Vulnerable Software and Affected Versions Omni versions prior to 0.48.0 Description Omni, a Kubernetes management platform, has a potential issue where the Wireguard SideroLink component could be exploited to allow unauthorized packet transmission. The system establishes a peer-to-pee...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
fleetdeck-poc
FleetDeck PoC !Go Versionhttps://img.shields.io/badge/go-...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
podman: Podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...
10 Evaluation Points for Your App Platform on Kubernetes
...
[SECURITY] Fedora 41 Update: checkpointctl-1.4.0-3.fc41
The checkpointctl command can be used for in-depth analysis of container checkpoints created with Podman and Kubernetes...
CVE-2025-9708 vulnerabilities
Vulnerabilities for packages: kubernetes-reflector...
GHSA-W7R3-MGWF-4MQQ vulnerabilities
Vulnerabilities for packages: kubernetes-reflector...