5 matches found
UBUNTU-CVE-2026-43390
In the Linux kernel, the following vulnerability has been resolved: nstree: tighten permission checks for listing Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use mayseeallnamespaces helper that...
PT-2026-39051
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nstree component where permission checks for listing are insufficient. This allows privileged services to potentially see namespaces of other privileged services,...
EUVD-2023-2895
Malicious code in bioql PyPI...
SUSE CVE-2025-55196
External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...
PT-2023-29934 · Unknown · Capsule-Proxy
Name of the Vulnerable Software and Affected Versions: capsule-proxy versions prior to 0.4.5 Description: A bug in the RoleBinding reflector used by capsule-proxy gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. This introduc...