GO-2026-4942 vulnerabilities

Vulnerabilities for packages: gitness, kots, zot, portieris, envoy-gateway, argocd-image-updater...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris (a Kubernetes admission controller for image policy enforcement) is vulnerable to image policy bypass in versions prior to v0.14.3 . The root cause is improper authorization of pod ownerReferences : when a pod contains a fabricated ownerReference whose Kind matches a supported contr...

EUVD-2026-62851

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544 Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

PT-2026-78689

Name of the Vulnerable Software and Affected Versions IBM Portieris versions 0.5.0 through 0.14.2 Description Improper authorization of pod owner references allows a remote authenticated attacker to bypass image policy enforcement. Recommendations Update IBM Portieris to a version later than 0.14...

Security Bulletin: Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference ( CVE-2026-18544 )

Summary IBM Portieris skips image policy enforcement when a pod contains a fabricated ownerReference whose Kind matches one of the supported controller types. This allows bypassing of image security policies in a namespace when Portieris is the enforcing Kubernetes admission controller...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: gitness, portieris-fips, argocd-image-updater-fips, envoy-gateway, kots, gitlab-rails-ce-fips, zot, gitlab-rails-ce, envoy-gateway-fips, argocd-image-updater, portieris...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitness, portieris-fips, argocd-image-updater-fips, envoy-gateway, kots, gitlab-rails-ce-fips, zot, gitlab-rails-ce, envoy-gateway-fips, argocd-image-updater, portieris...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, conftest-fips, nvidia-nsight-compute-13.0, azure-ipam, vertical-pod-autoscaler, mattmoor-chainit, dataplaneapi-fips, yace-fips, secrets-store-csi-driver-provider-gcp,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, conftest-fips, nvidia-nsight-compute-13.0, azure-ipam, vertical-pod-autoscaler, mattmoor-chainit, dataplaneapi-fips, yace-fips, secrets-store-csi-driver-provider-gcp,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: atlantis-fips, cilium-cli, conftest-fips, secrets-store-csi-driver-provider-gcp, temporal-server, rook, external-secrets-fips, newrelic-nri-statsd, azure-aad-pod-identity-mic, kubeflow-fips, local-static-provisioner-fips, git-lfs, chartmuseum-fips,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: gitness, kots, zot, portieris, envoy-gateway, argocd-image-updater...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitness, kots, zot, portieris, envoy-gateway, argocd-image-updater...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, gogatekeeper, tfsec, crossplane-provider-aws-s3, apache-exporter, buildah, mods, crossplane-provider-aws-iam, terragrunt, kube-metrics-adapter, pguser, volume-modifier-for-k8s, redpanda, tempo, aws-signer-notation-plugin,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, gogatekeeper, tfsec, crossplane-provider-aws-s3, apache-exporter, buildah, mods, crossplane-provider-aws-iam, terragrunt, kube-metrics-adapter, pguser, volume-modifier-for-k8s, redpanda, tempo, aws-signer-notation-plugin,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, gogatekeeper, tfsec, crossplane-provider-aws-s3, apache-exporter, buildah, mods, crossplane-provider-aws-iam, terragrunt, kube-metrics-adapter, pguser, volume-modifier-for-k8s, redpanda, tempo, blobfuse2,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, gogatekeeper, tfsec, crossplane-provider-aws-s3, apache-exporter, buildah, mods, crossplane-provider-aws-iam, terragrunt, kube-metrics-adapter, pguser, volume-modifier-for-k8s, redpanda, tempo, blobfuse2,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, harbor-scanner-trivy, opentelemetry-operator, helm-mapkubeapis, helm-set-status, xeol, k3d, openbao, docker-credential-gcr, lazydocker, kpt, promxy, undock, bom, crossplane, bento, falcoctl, portieris, skaffold, kubeflow-katib, aactl, k3s...