PT-2026-45027

Name of the Vulnerable Software and Affected Versions IPAM versions prior to 1.11.7 IPAM versions prior to 1.12.4 IPAM versions prior to 1.13.0 Description The IPAM controller's ClusterRole grants excessive CRUD permissions create, delete, get, list, patch, update, watch on core/v1 Secrets, despi...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: rancher-agent, cluster-api-helm-controller, xeol, opa, kubevela, kaniko, kargo, helm-mapkubeapis, consul-k8s, syft, manifest-tool, trivy-operator, skaffold, linkerd2, rancher, grype, tw, k8sgpt, kots, spegel, opa-envoy, helm, containerd, helm-operator, k3s, wolfictl,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: rancher-agent, cluster-api-helm-controller, xeol, opa, kubevela, kaniko, kargo, helm-mapkubeapis, consul-k8s, syft, manifest-tool, trivy-operator, skaffold, linkerd2, rancher, grype, tw, k8sgpt, kots, spegel, opa-envoy, helm, containerd, helm-operator, k3s, wolfictl,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kubevela-fips, docker-compose-fips, headlamp-fips, upwind-agent, helm-push, trivy-fips, kubescape-operator, xeol, helm-fips, buildkitd, gitlab-rails-ce, grype-fips, packer-fips, rancher, steampipe, cloudbeat, linkerd2-fips, envoy-gateway,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, crossplane-provider-aws-rolesanywhere, crossplane-provider-aws-iam-fips, upwind-agent, argo-rollouts-fips, policy-controller-fips, omni-fips, vault-fips, crossplane-provider-aws-sagemaker-fips, conftest, crossplane-provider-aws-sqs-fip...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, crossplane-provider-aws-rolesanywhere, crossplane-provider-aws-iam-fips, upwind-agent, argo-rollouts-fips, policy-controller-fips, omni-fips, vault-fips, crossplane-provider-aws-sagemaker-fips, conftest, crossplane-provider-aws-sqs-fip...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, crossplane-provider-aws-rolesanywhere, crossplane-provider-aws-iam-fips, upwind-agent, argo-rollouts-fips, policy-controller-fips, omni-fips, vault-fips, crossplane-provider-aws-sagemaker-fips, conftest, crossplane-provider-aws-sqs-fip...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: harbor, nri-rabbitmq, minio, xeol, step-issuer, container-object-storage-interface, kubevela, coredns, croc, gitaly, consul-k8s, terraform-provider-acme, addon-resizer, sops, litefs, argo-events, cert-manager-csi-driver, gostatsd, runc, argo-cd,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: harbor, nri-rabbitmq, minio, xeol, step-issuer, container-object-storage-interface, kubevela, coredns, croc, gitaly, consul-k8s, terraform-provider-acme, addon-resizer, sops, ini-file, litefs, argo-events, cert-manager-csi-driver, gostatsd, runc, argo-cd,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: harbor, nri-rabbitmq, minio, xeol, step-issuer, container-object-storage-interface, kubevela, coredns, croc, gitaly, consul-k8s, terraform-provider-acme, addon-resizer, sops, ini-file, litefs, argo-events, cert-manager-csi-driver, gostatsd, runc, argo-cd,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: harbor, nri-rabbitmq, minio, xeol, step-issuer, container-object-storage-interface, kubevela, coredns, croc, gitaly, consul-k8s, terraform-provider-acme, addon-resizer, sops, ini-file, litefs, argo-events, cert-manager-csi-driver, gostatsd, runc, argo-cd,...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: harbor, minio, xeol, step-issuer, kubevela, coredns, gitaly, terraform-provider-acme, sops, argo-events, cert-manager-csi-driver, runc, argo-cd, crossplane, guac, juicefs, ko, gatus, otel-cli, grafana-alloy, secrets-store-csi-driver-provider-azure, dagger, buildah,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: harbor, nri-rabbitmq, minio, xeol, step-issuer, container-object-storage-interface, kubevela, coredns, croc, gitaly, consul-k8s, terraform-provider-acme, addon-resizer, sops, ini-file, litefs, argo-events, cert-manager-csi-driver, gostatsd, runc, argo-cd,...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: harbor, minio, xeol, step-issuer, kubevela, coredns, gitaly, terraform-provider-acme, sops, argo-events, cert-manager-csi-driver, runc, argo-cd, crossplane, guac, juicefs, ko, gatus, otel-cli, grafana-alloy, secrets-store-csi-driver-provider-azure, dagger, buildah,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: harbor, minio, kubevela, coredns, argo-events, runc, argo-cd, crossplane, juicefs, ko, gatus, grafana-alloy, buildah, datadog-agent, k8ssandra-client, scorecard, tkn, pgtimetable, go, nats, conftest, dask-gateway, flyte, trino, k8s-device-plugin, hubble,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: harbor, minio, kubevela, coredns, argo-events, runc, argo-cd, crossplane, juicefs, ko, gatus, grafana-alloy, buildah, datadog-agent, k8ssandra-client, scorecard, tkn, pgtimetable, go, nats, conftest, dask-gateway, flyte, trino, k8s-device-plugin, hubble,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: harbor, minio, kubevela, coredns, argo-events, runc, argo-cd, crossplane, juicefs, ko, gatus, grafana-alloy, buildah, datadog-agent, k8ssandra-client, scorecard, tkn, pgtimetable, go, nats, conftest, dask-gateway, flyte, trino, k8s-device-plugin, hubble,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: harbor, minio, kubevela, coredns, argo-events, runc, argo-cd, crossplane, juicefs, ko, gatus, grafana-alloy, buildah, datadog-agent, k8ssandra-client, scorecard, tkn, pgtimetable, go, nats, conftest, dask-gateway, flyte, trino, k8s-device-plugin, hubble,...

CVE-2026-40050

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CrowdStrike LogScale 安全漏洞

CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...