123 matches found
kube-score
kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...
kube-linter
Static analysis for Kubernetes What is KubeLinter? KubeLinter analyzes Kubernetes YAML files, Helm charts, and Kustomize manifests, and checks them against a variety of best practices, with a focus on production readiness and security. KubeLinter runs sensible default checks, designed to give you...
EUVD-2026-43087
Spinnaker: Improper yaml processing on kustomize bake operations...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: cluster-autoscaler, cert-manager, vcluster, k3s, external-secrets-operator, istio, kube-vip-cloud-provider, pulumi-kubernetes-operator, tekton-pipelines, tetragon, emissary, kube-rbac-proxy, cluster-api-aws-controller, cloud-provider-azure,...
CVE-2026-76229
A flaw was found in Renovate. This arbitrary command injection vulnerability exists within the kustomize manager, where user-provided chart names are not properly sanitized before being used in helm pull commands. An attacker with write access to a repository can exploit this by crafting maliciou...
CVE-2026-76229
Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names are appended to helm pull commands without proper sanitization. Attackers with repository write access can craft malicious kustomization.yam...
CVE-2026-76229 Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize
Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names are appended to helm pull commands without proper sanitization. Attackers with repository write access can craft malicious kustomization.yam...
CVE-2026-76229
Renovate (dependency update bot) versions from 39.218.9 (March 26, 2025) before 40.33.0 contain an arbitrary command injection in the kustomize manager . The depName argument passed to the helmRepositoryArgs function in lib/modules/manager/kustomize/artifacts.ts is not escaped using shlex.quote b...
EUVD-2026-62470
Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names are appended to helm pull commands without proper sanitization. Attackers with repository write access can craft malicious kustomization.yam...
CVE-2026-76229 Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize
Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names are appended to helm pull commands without proper sanitization. Attackers with repository write access can craft malicious kustomization.yam...
PT-2026-78411
Name of the Vulnerable Software and Affected Versions Renovate versions 39.218.0 through 40.32.0 Description The kustomize manager allows arbitrary command injection because user-provided chart names are appended to helm pull commands without proper sanitization. An attacker with repository write...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: newrelic-infra-operator, image-factory-fips, crossplane-provider-azure-portal, crossplane-provider-aws-ram-fips, dockerize-fips, kubescape-server, coredns, crossplane-aws-monolith, crossplane-provider-aws-sns, moby-ryuk, cert-manager-cmctl-fips, mc-fips, bank-vaults,...
GO-2026-5774 vulnerabilities
Vulnerabilities for packages: cosmo-router-fips, karma-fips, cosmo-router, telegraf, fluxcd-kustomize-mutating-webhook-fips, karma, fluxcd-kustomize-mutating-webhook, zitadel...
GO-2026-5775 vulnerabilities
Vulnerabilities for packages: cosmo-router-fips, karma-fips, cosmo-router, telegraf, fluxcd-kustomize-mutating-webhook-fips, karma, fluxcd-kustomize-mutating-webhook, zitadel...
GO-2026-5777 vulnerabilities
Vulnerabilities for packages: cosmo-router-fips, karma-fips, cosmo-router, telegraf, fluxcd-kustomize-mutating-webhook-fips, karma, fluxcd-kustomize-mutating-webhook, zitadel...
GO-2024-2466 vulnerabilities
Vulnerabilities for packages: pulumi-language-dotnet, bom, goreleaser, pulumi, gitsign, apko, pulumi-kubernetes-operator, zot, pulumi-language-java, nuclei, gomplate, pulumi-language-yaml, go-licenses, scorecard, kots, gitness, flux-kustomize-controller, kubevela, src-fingerprint...
GO-2025-4007 vulnerabilities
Vulnerabilities for packages: net-kourier-fips, vault-secrets-webhook, age, etcd-fips, kubernetes-dashboard-web, envconsul, cluster-api-fips, kubernetes-csi-driver-nfs, dockerize-fips, flux, terraform-provider-azuread-fips, harbor-registry, coredns, checksec, yunikorn-web,...
GO-2025-4013 vulnerabilities
Vulnerabilities for packages: net-kourier-fips, vault-secrets-webhook, age, etcd-fips, kubernetes-dashboard-web, envconsul, cluster-api-fips, dockerize-fips, flux, terraform-provider-azuread-fips, harbor-registry, checksec, yunikorn-web, kubernetes-csi-external-attacher-fips, kubeflow-katib,...
GO-2025-4009 vulnerabilities
Vulnerabilities for packages: net-kourier-fips, vault-secrets-webhook, age, etcd-fips, kubernetes-dashboard-web, envconsul, cluster-api-fips, dockerize-fips, flux, terraform-provider-azuread-fips, harbor-registry, checksec, yunikorn-web, kubernetes-csi-external-attacher-fips, kubeflow-katib,...