overlord

Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...

cloud-middleware-dataset

Cloud Middleware Dataset This project contains cloud middleware i.e. agents installed by cloud security providers used across the major cloud service providers Azure, AWS and GCP. The cloud middleware dataset lists all agents installed by the major cloud service providers Azure, AWS, and GCP. The...

gibson

Gibson Network monitoring tool that maps process-to-network connections, identifies cloud providers, and generates firewall rules. Lightweight agent for collection, server for aggregation, parser for analysis. Screenshots Cross-machine overview — OS version comparison, shared IP detection,...

AZL-100935 CVE-2026-83530 affecting package kube-vip-cloud-provider 0.0.10-8

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

AZL-100917 CVE-2026-83530 affecting package cloud-provider-kubevirt 0.5.1-7

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

AZL-99246 CVE-2026-84304 affecting package kube-vip-cloud-provider 0.0.10-8

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-99177 CVE-2026-84304 affecting package cloud-provider-kubevirt 0.5.1-7

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-98376 CVE-2026-37236 affecting package kube-vip-cloud-provider 0.0.10-8

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

AZL-98349 CVE-2026-37236 affecting package cloud-provider-kubevirt 0.5.1-7

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, cert-manager, crossplane, tekton-pipelines, cluster-api-ipam-provider-in-cluster, cilium, keda, gatekeeper, kubernetes-csi-external-snapshotter, kots, cluster-api-gcp-controller, node-feature-discovery, tkn, spicedb, flux-notification-controller,...

CVE-2026-73500 affecting package cloud-provider-kubevirt for versions less than 0.5.1-7

CVE-2026-73500 affecting package cloud-provider-kubevirt for versions less than 0.5.1-7. A patched version of the package is available...

CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8

CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8. A patched version of the package is available...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, kserve-localmodelnode-agent-fips, secretgen-controller-fips, cortex, listmonk, linkerd2-cni-plugin, yunikorn-web, grafana-rollout-operator, crossplane-provider-aws-keyspaces, crossplane-provider-aws-firehose, cerbos, ory-kratos-fips,...

GO-2026-5973 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider-fips, rke2-cloud-provider...

GO-2026-5973 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: omnibump, emissary, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, spark-operator, dgraph, tekton-pipelines, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, helm, vcluster,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: emissary, crossplane-provider-aws-rds, podman, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-elasticache, gatekeeper, gitaly, skaffold, prometheus, percona-server-mongodb-operator, octo-sts, juicefs-csi-driver, opa, oauth2-proxy, grafana-alloy,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, step, buildkitd, podman, falcoctl, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, helm, gitea, aactl, skaffold, prometheus, pulumi-language-java, k8sgpt, cilium-cli, zot,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, step, spark-operator, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, gatekeeper, helm, metacontroller, aactl, esbuild, nri-nginx, sonobuo...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: podman, cluster-api-ipam-provider-in-cluster, ini-file, skaffold, mongo-tools, kube-bench, opa, kpt, wolfictl, nri-cassandra, pgpool2exporter, azure-ipam, kubeflow-katib, cluster-api-aws-controller, malcontent, containerd, slsa-verifier, k8ssandra-operator,...