hardening-k8s-containers

Intentionally Vulnerable Note Taking Application This repository contains a very simple and vulnerable application used to demonstrate the differences between deploying this application with the default settings to a Kubernetes cluster, versus adding some extra security settings that WILL NOT fix...

EUVD-2023-23456

Malicious code in bioql PyPI...

EUVD-2022-2835

Malicious code in bioql PyPI...

EUVD-2023-24130

Malicious code in bioql PyPI...

Security update for minikube (important)

openSUSE Security Update: Security update for minikube Announcement ID: openSUSE-SU-2025:0318-1 Rating: important References: 1234528 Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP...

CVE-2018-1002103

In Minikube versions 0.3.0-0.29.0, minikube exposes the Kubernetes Dashboard listening on the VM IP at port 30000. In VM environments where the IP is easy to predict, the attacker can use DNS rebinding to indirectly make requests to the Kubernetes Dashboard, create a new Kubernetes Deployment...

Exploit for CVE-2025-1974

CVE-2025-1974: Kubernetes Ingress Nginx Controller 취약점 분석 및 Po...

GO-2023-1961 Minikube RCE via DNS Rebinding in k8s.io/minikube

Minikube RCE via DNS Rebinding in k8s.io/minikube...

CRI-O vulnerable to an arbitrary systemd property injection

Impact On CRI-O, it looks like an arbitrary systemd property can be injected via a Pod annotation: --- apiVersion: v1 kind: Pod metadata: name: poc-arbitrary-systemd-property-injection annotations: I believe that ExecStart with an arbitrary command works here too, but I haven't figured out how to...

GHSA-2CGQ-H8XW-2V5J CRI-O vulnerable to an arbitrary systemd property injection

Impact On CRI-O, it looks like an arbitrary systemd property can be injected via a Pod annotation: --- apiVersion: v1 kind: Pod metadata: name: poc-arbitrary-systemd-property-injection annotations: I believe that ExecStart with an arbitrary command works here too, but I haven't figured out how to...

io.quarkus:quarkus-kind-deployment (2.16.11.final), io.quarkus:quarkus-minikube-deployment (2.16.11.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.16.11.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.16.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-kind-deployment 2.16.11.final -...

io.quarkus:quarkus-kind-deployment (2.12.0.final), io.quarkus:quarkus-minikube-deployment (2.12.0.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.12.0.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.12.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-kind-deployment 2.12.0.final -...

io.quarkus:quarkus-kind-deployment (2.16.1.final), io.quarkus:quarkus-minikube-deployment (2.16.1.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.16.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.16.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-kind-deployment 2.16.1.final -...

io.quarkus:quarkus-minikube-deployment (2.5.0.cr1), io.quarkus:quarkus-openshift-deployment (2.5.0.cr1) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.5.0.cr1)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 2.5.0.cr1 -...

io.javaoperatorsdk:operator-framework-quarkus-extension-deployment (>=1.7.0, <=1.7.1), io.quarkus:quarkus-minikube-deployment (1.11.0.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.11.0.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.11.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.javaoperatorsdk:operator-framework-quarkus-extension-deployment =1.7....

io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (2.0.0.beta5), io.quarkus:quarkus-minikube-deployment (2.2.1.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.2.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment 2.0.0.beta5 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-bundle-generator-deployment (>=4.0.2, <=4.0.3), io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (>=4.0.2, <=4.0.3) +3 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.13.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.13.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: -...

io.quarkus:quarkus-minikube-deployment (1.8.3.final), io.quarkus:quarkus-openshift-deployment (1.8.3.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.8.3.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.8.3.final -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-bundle-generator-deployment (5.1.0), io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (5.1.0) +3 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.16.3.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.16.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: -...

io.automatiko.quarkus:automatiko-operator-deployment (0.18.0), io.quarkus:quarkus-kind-deployment (2.11.1.final) +2 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.11.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.11.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.automatiko.quarkus:automatiko-operator-deployment 0.18.0 -...