cupcake

Cupcake Заставьте ИИ-агентов следовать правилам. Слой принудительного применения политик для ИИ-агентов; обеспечивает лучшую производительность и безопасность без потребления контекста модели. Детерминированное соблюдение правил для ваших агентов. Интерактивные примеры Лучшая производительность з...

gatekeeper

Gatekeeper Gatekeeper는 OPA와 어떻게 다른가요? OPA와 사이드카 kube-mgmt를 함께 사용하는 방식 일명 Gatekeeper v1.0과 비교하여, Gatekeeper는 다음과 같은 기능을 제공합니다: 확장 가능하고 매개변수화된 정책 라이브러리 정책 라이브러리를 인스턴스화하기 위한 네이티브 Kubernetes CRD 일명 "constraints" 정책 라이브러리를 확장하기 위한 네이티브 Kubernetes CRD 일명 "constraint templates" 뮤테이션 지원을 위한 네이티브 Kubernet...

mesh-kridik

mesh-kridik Kubernetes サービスメッシュのセキュリティを強化しましょう！ mesh-kridik は、istio サービスメッシュを使用した Kubernetes クラスターに対してさまざまなセキュリティチェックを実行し、セキュリティレポートを出力するオープンソースのセキュリティチェッカーです。 セキュリティチェックテストは、istio セキュリティのベストプラクティス の完全な実装です。 セキュリティチェックは、istio サービスメッシュを使用した Kubernetes クラスターに対して実行され、OPA（Open Policy...

mesh-kridik

mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...

kubeeye

English | 中文 KubeEye is a cloud-native cluster inspection tool specifically designed for Kubernetes, capable of identifying issues and risks within the Kubernetes cluster based on custom rules. QuickStart Installation Download the installation package from Releases, which includes Helm chart, dem...

CVE-2026-45730

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Dashboard's project management API, allowing any authenticated user without membership in the target project to bypass OPA authorization checks on write paths P...

CVE-2026-45730

Nuclio is a serverless framework for real-time events and data processing. The vulnerability exists in the Nuclio Dashboard's project management API on write paths (PUT /api/projects/{id}, DELETE /api/projects). The root cause is that these endpoints construct PermissionOptions without setting Me...

CVE-2026-45730 Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Dashboard's project management API, allowing any authenticated user without membership in the target project to bypass OPA authorization checks on write paths P...

EUVD-2026-70212

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Dashboard's project management API, allowing any authenticated user without membership in the target project to bypass OPA authorization checks on write paths P...

CLEANSTART-2026-SP20560 Security fixes in opa 1.19.1-r1

Package opa version 1.19.1-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-XH81643 Security fixes in opa-fips 1.19.1-r2

Package opa-fips version 1.19.1-r2 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-NW77012 Security fixes in opa-fips 1.19.1-r1

Package opa-fips version 1.19.1-r1 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

AZL-98391 CVE-2026-37236 affecting package opa 0.63.0-5

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

GO-2022-0587 vulnerabilities

Vulnerabilities for packages: opa...

GO-2022-0574 vulnerabilities

Vulnerabilities for packages: opa...

GO-2026-4506 vulnerabilities

Vulnerabilities for packages: opa-envoy, opa-fips-envoy...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: zarf, conftest, cosign, opa, policy-controller-fips, spire-server-fips, conftest-fips, snyk-cli, policy-controller, k8sgpt, spire-server, kots, cosign-fips, tfsec, zot, kubescape...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, gitlab-operator, gogatekeeper, kubevela, consul-k8s-fips, nerdctl-fips, opa-envoy, k8sgpt, flux-source-controller, cert-manager-cmctl, chartmuseum-fips, trivy-operator-fips, gitlab-rails-ce-fips,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: opa, pulumi-language-java, amass, portieris-fips, sigstore-scaffolding-fips, spark-operator-fips, kubeflow-pipelines, cluster-proportional-autoscaler, crossplane-provider-gcp, step, kubeflow, opa-fips-envoy, opa-fips, step-ca, step-ca-fips, portieris,...

GO-2025-4175 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, sigstore-scaffolding-fips, knative-operator-fips, gcp-compute-persistent-disk-csi-driver-fips, flannel-cni-plugin-fips, gogatekeeper, keda-fips, kubelet-csr-approver, vertical-pod-autoscaler-fips, kuberay-operator-fips, monstache,...