GO-2026-4942 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kots, portieris, envoy-gateway, gitness, zot...

EUVD-2026-62851

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

Security Bulletin: Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference ( CVE-2026-18544 )

Summary IBM Portieris skips image policy enforcement when a pod contains a fabricated ownerReference whose Kind matches one of the supported controller types. This allows bypassing of image security policies in a namespace when Portieris is the enforcing Kubernetes admission controller...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: portieris, argocd-image-updater-fips, portieris-fips, gitness, gitlab-rails-ce, gitlab-rails-ce-fips, kots, envoy-gateway-fips, envoy-gateway, argocd-image-updater, zot...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: portieris, argocd-image-updater-fips, portieris-fips, gitness, gitlab-rails-ce, gitlab-rails-ce-fips, kots, envoy-gateway-fips, envoy-gateway, argocd-image-updater, zot...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: terraform-provider-time-fips, cluster-api-provider-vsphere, git-credential-oauth, rancher-agent, blob-csi-fips, net-kourier-fips, crossplane-provider-terraform, x509-certificate-exporter-fips, step-kms-plugin-fips, iptables-wrappers, cluster-api-gcp-controller,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: terraform-provider-time-fips, cluster-api-provider-vsphere, git-credential-oauth, rancher-agent, blob-csi-fips, net-kourier-fips, crossplane-provider-terraform, x509-certificate-exporter-fips, step-kms-plugin-fips, iptables-wrappers, cluster-api-gcp-controller,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: rancher-agent, chezmoi, sops-fips, x509-certificate-exporter-fips, prometheus-node-exporter-fips, tailscale, cert-manager-webhook-pdns-fips, openbao-k8s-fips, velero-plugin-for-microsoft-azure, jitsucom-bulker, docker-fips, pulumi, prometheus-node-exporter,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kots, portieris, envoy-gateway, gitness, zot...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kots, portieris, envoy-gateway, gitness, zot...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: nri-redis, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, opentelemetry-collector, secrets-store-csi-driver-provider-azure, kyverno-policy-reporter, minify, vt-cli, tflint, kubernetes-dns-node-cache, runc, sbom-scorecard, step-kms-plugin, chartmuseum,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: nri-redis, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, opentelemetry-collector, secrets-store-csi-driver-provider-azure, kyverno-policy-reporter, minify, vt-cli, tflint, kubernetes-dns-node-cache, runc, sbom-scorecard, step-kms-plugin, chartmuseum,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: nri-redis, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, opentelemetry-collector, secrets-store-csi-driver-provider-azure, kyverno-policy-reporter, minify, vt-cli, tflint, kubernetes-dns-node-cache, runc, sbom-scorecard, step-kms-plugin, chartmuseum,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: nri-redis, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, opentelemetry-collector, secrets-store-csi-driver-provider-azure, kyverno-policy-reporter, minify, vt-cli, tflint, kubernetes-dns-node-cache, runc, sbom-scorecard, step-kms-plugin, chartmuseum,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: k3d, harbor-scanner-trivy, helm-mapkubeapis, lazydocker, openbao, newrelic-infrastructure-agent, prometheus, amazon-cloudwatch-agent-operator, undock, rancher-agent, skaffold, aactl, docker-credential-gcr, cluster-api-helm-controller, portieris, falcoctl, bento, bom,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, rancher-machine, rancher, bom, beats, gitlab-rails-ce, rancher-agent, vault, bento, harbor-scanner-trivy-fips, crossplane, undock, redpanda, newrelic-infrastructure-agent, prometheus, cluster-api-fips, opentelemetry-operator-fips, k3d, traefik,...

CVE-2024-45339 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, step, kubeflow-pipelines, step-issuer-fips, caddy, kyverno, cluster-proportional-autoscaler, sriov-network-device-plugin-fips, pulumi-language-yaml, step-issuer, smarter-device-manager-fips, flux-image-reflector-controller, opa-fips-envoy,...