Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.8 security update

Red Hat Advanced Cluster Management for Kubernetes 2.13 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. Red Hat Advanced Cluster Management for Kubernetes 2.13 images Red Hat Advanced Cluster Management for Kubernetes provides...

CVE-2026-40564

Files or Directories Accessible to External Parties, Server-Side Request Forgery SSRF vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so that it points to user-owned files or addresses. This lets a user with CR create permissions read files...

Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.3

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.10.3 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.10.3 release that simplify the process of...

Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.17.0

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.17.0 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.17.0 release that simplify the process of...

CVE-2026-25680 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-25680 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39829 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39829 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-46597 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-46597 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39827 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39827 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-27136 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-27136 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-42506 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-42506 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-25681 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-25681 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39834 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39834 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39821 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39821 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

Dstack-Capsule: Pod-Level Remote Attestation for Confidential Workloads on Kubernetes

The rise of LLM-as-a-Service and other confidential cloud workloads demands cryptographic proof that user data is processed in a trusted, untampered environment. Existing solutions, notably Confidential Containers CoCo, enforce a strict "one Pod per VM" model that attests only the Guest OS stack,...

Containerd 1.7.27 < 1.7.32 / 2.0.4 < 2.0.9 / 2.1.x < 2.2.4 / 2.3.x < 2.3.1 runAsNonRoot Bypass

The version of Containerd on the remote host is 1.7.27 prior to 1.7.32, 2.0.4 prior to 2.0.9, 2.1.x prior to 2.2.4, or 2.3.x prior to 2.3.1. It is, therefore, affected by a security bypass vulnerability. A bug was found in containerd where containers launched with a numeric User directive that...