cve-2018-1002105

CVE-2018-1002105 Utility di test che verifica se un cluster è affetto dalla vulnerabilità Kubernetes ad alta severità pubblicata qui. Un'analisi a livello stakeholder della CVE-2018-1002105 è disponibile su https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/...

CVE-2026-54428 vulnerabilities

Vulnerabilities for packages: nuxeo, wazuh-indexer, airbyte-platform-fips, dependency-track-apiserver, geoserver, conductor-fips, cassandra-reaper, apicurio-registry-fips, kayenta-fips, opensearch, akhq, druid, sonarqube, floci, elasticsearch-fips, hadoop-fips, jbang, traccar, logstash-fips,...

GHSA-V3JC-474W-2WM6 vulnerabilities

Vulnerabilities for packages: nuxeo, wazuh-indexer, airbyte-platform-fips, dependency-track-apiserver, geoserver, conductor-fips, cassandra-reaper, apicurio-registry-fips, kayenta-fips, opensearch, akhq, druid, sonarqube, floci, elasticsearch-fips, hadoop-fips, jbang, traccar, logstash-fips,...

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27. A patched version of the package is available...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.42 security update

Red Hat build of MicroShift release 4.19.42 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

SUSE CVE-2026-55884

Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.20.8 through 0.37.3, the Tilt HUD HTTP server registers handlers on a gorilla/mux router with no authenticating middleware. When the HUD is bound to a non-loopback address, an unauthenticated network caller can...

EUVD-2026-51154

Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard...

CLEANSTART-2026-BZ74464 Security fixes in eks-distro-kube-apiserver-fips 1.34.2-r0

Package eks-distro-kube-apiserver-fips version 1.34.2-r0 fixes 32 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914...

CLEANSTART-2026-JN50813 Security fixes in eks-distro-kube-apiserver 1.34.2-r0

Package eks-distro-kube-apiserver version 1.34.2-r0 fixes 21 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914...

SUSE-SU-2026:22997-1 Security update for hawk-apiserver

This update for hawk-apiserver fixes the following issues: Changes in hawk-apiserver: - Bump ClusterLabs/go-pacemaker v0.0.0-20260609131737-256130b189e0 bsc1267454 Version 0.1.0+git.1773234993.db3c82f: handle /cib/live/primitives//edit in hawk-apiserver - Bump github.com/stretchr/testify.v1.11.0...

OPENSUSE-SU-2026:11391-1 kubernetes1.36-apiserver-1.36.3-1.1 on GA media

These are all security issues fixed in the kubernetes1.36-apiserver-1.36.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11388-1 kubernetes1.33-apiserver-1.33.13-2.1 on GA media

These are all security issues fixed in the kubernetes1.33-apiserver-1.33.13-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-54291 vulnerabilities

Vulnerabilities for packages: nuxeo, hono, dependency-track-apiserver, camunda, flyway-fips, geoserver, conductor-fips, apicurio-registry-fips, dependency-track, kayenta-fips, camunda-zeebe, ghidra, keycloak, druid, sonarqube, keycloak-fips, floci, traccar, kayenta, traccar-fips, seata,...

GHSA-J92G-9F8W-J867 vulnerabilities

Vulnerabilities for packages: nuxeo, hono, dependency-track-apiserver, camunda, flyway-fips, geoserver, conductor-fips, apicurio-registry-fips, dependency-track, kayenta-fips, camunda-zeebe, ghidra, keycloak, druid, sonarqube, keycloak-fips, floci, traccar, kayenta, traccar-fips, seata,...

CVE-2026-55882

Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.19.5 through 0.37.3, the Tilt HUD server mounts Go net/http/pprof handlers under /debug with no access control. When the HUD or apiserver listener is network-exposed, an unauthenticated caller can read process memor...

CVE-2026-55882 Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.19.5 through 0.37.3, the Tilt HUD server mounts Go net/http/pprof handlers under /debug with no access control. When the HUD or apiserver listener is network-exposed, an unauthenticated caller can read process memor...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, dependency-track-apiserver, cassandra-reaper, trino, knative-kafka-broker, s3proxy-fips, akhq, cassandra, sonarqube, zookeeper-fips, kafbat-ui, zookeeper, s3proxy, management-api-for-apache-cassandra-5.0, nextflow,...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...