42 matches found
CVE-2026-41185 ServiceAccount token disclosure via Azure IPAM CNI plugin logs
When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...
CVE-2026-41185
When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...
EUVD-2026-32933
When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...
CVE-2026-41185 ServiceAccount token disclosure via Azure IPAM CNI plugin logs
When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...
Tigera Calico 安全漏洞
Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workloads. Tigera Calico has a security vulnerability, which stems from the Azure IPAM plugin recording unencrypted configuration mappings in logs...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, kube-logging-operator-custom-runner, crossplane-provider-aws-ec2, gke-gcloud-auth-plugin, jaeger-operator, buf, podman, terraform-provider-azuread, falco-no-driver, kube-bench, kube-logging-operator, stakater-reloader, kubeflow, crossplane...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, kube-logging-operator-custom-runner, crossplane-provider-aws-ec2, gke-gcloud-auth-plugin, jaeger-operator, buf, podman, terraform-provider-azuread, falco-no-driver, kube-bench, kube-logging-operator, stakater-reloader, kubeflow, crossplane...
CVE-2025-67499 vulnerabilities
Vulnerabilities for packages: flannel-fips, kuma, nerdctl-fips, rke2-runtime, datadog-agent-fips, calico, flannel, nerdctl, multus-cni-fips, rootlesskit, k3s, buildah, buildkitd, rootlesskit-fips, datadog-agent, calico-fips, containerd, azure-ipam, docker, containerd-fips, multus-cni, istio-fips,...
GHSA-JV3W-X3R3-G6RM vulnerabilities
Vulnerabilities for packages: flannel-fips, kuma, nerdctl-fips, rke2-runtime, datadog-agent-fips, calico, flannel, nerdctl, multus-cni-fips, rootlesskit, k3s, buildah, buildkitd, rootlesskit-fips, datadog-agent, calico-fips, containerd, azure-ipam, docker, containerd-fips, multus-cni, istio-fips,...
CVE-2025-67499 vulnerabilities
Vulnerabilities for packages: docker, calico, azure-ipam, datadog-agent, nerdctl, istio, rootlesskit, podman, kuma, multus-cni, flannel, k3s, buildah, containerd, buildkitd...
GHSA-JV3W-X3R3-G6RM vulnerabilities
Vulnerabilities for packages: docker, calico, azure-ipam, datadog-agent, nerdctl, istio, rootlesskit, podman, kuma, multus-cni, flannel, k3s, buildah, containerd, buildkitd...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, amass, http-echo, go-md2man, juicefs, litefs, rancher-helm, kube-logging-operator-custom-runner, gke-gcloud-auth-plugin, terraform-provider-azuread, metacontroller, falco-no-driver, kube-bench, opensearch-k8s-operator, kubescape-operator,...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, amass, http-echo, go-md2man, juicefs, litefs, rancher-helm, kube-logging-operator-custom-runner, gke-gcloud-auth-plugin, terraform-provider-azuread, metacontroller, falco-no-driver, kube-bench, opensearch-k8s-operator, kubescape-operator,...
GHSA-7WWX-XJ66-R44X vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, amass, http-echo, go-md2man, juicefs, litefs, rancher-helm, kube-logging-operator-custom-runner, gke-gcloud-auth-plugin, terraform-provider-azuread, metacontroller, falco-no-driver, kube-bench, opensearch-k8s-operator, kubescape-operator,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, amass, http-echo, go-md2man, juicefs, litefs, rancher-helm, kube-logging-operator-custom-runner, terraform-provider-azuread, metacontroller, falco-no-driver, kube-bench, opensearch-k8s-operator, kubescape-operator, redpanda, s5cmd,...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, amass, http-echo, go-md2man, juicefs, litefs, rancher-helm, kube-logging-operator-custom-runner, gke-gcloud-auth-plugin, terraform-provider-azuread, metacontroller, falco-no-driver, kube-bench, opensearch-k8s-operator, kubescape-operator,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, amass, http-echo, go-md2man, juicefs, litefs, rancher-helm, kube-logging-operator-custom-runner, gke-gcloud-auth-plugin, terraform-provider-azuread, metacontroller, falco-no-driver, kube-bench, opensearch-k8s-operator, kubescape-operator,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, amass, http-echo, go-md2man, juicefs, litefs, rancher-helm, kube-logging-operator-custom-runner, gke-gcloud-auth-plugin, terraform-provider-azuread, metacontroller, falco-no-driver, kube-bench, opensearch-k8s-operator, kubescape-operator,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, amass, http-echo, go-md2man, juicefs, litefs, rancher-helm, kube-logging-operator-custom-runner, gke-gcloud-auth-plugin, terraform-provider-azuread, metacontroller, falco-no-driver, kube-bench, opensearch-k8s-operator, kubescape-operator,...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, amass, http-echo, go-md2man, juicefs, litefs, rancher-helm, kube-logging-operator-custom-runner, gke-gcloud-auth-plugin, terraform-provider-azuread, metacontroller, falco-no-driver, kube-bench, opensearch-k8s-operator, kubescape-operator,...