125 matches found
CVE-2026-42499 vulnerabilities
Vulnerabilities for packages: prometheus-adapter, prometheus, opencost, nats, splunk-otel-collector, kpt, goreleaser, pgtimetable, teleport, sftpgo, zot, crossplane, telegraf, k8s-device-plugin, metrics-server, rabbitmq-cluster-operator, helm-operator, minio, cert-manager, zarf, atlantis, thanos,...
GHSA-P9H5-JM8X-MJM5 vulnerabilities
Vulnerabilities for packages: prometheus-adapter, prometheus, opencost, nats, splunk-otel-collector, kpt, goreleaser, pgtimetable, teleport, sftpgo, zot, crossplane, telegraf, k8s-device-plugin, metrics-server, rabbitmq-cluster-operator, helm-operator, minio, cert-manager, zarf, atlantis, thanos,...
GHSA-QC64-M6C2-V4X7 vulnerabilities
Vulnerabilities for packages: prometheus-adapter, hey, pdfcpu, prometheus, mesosphere-vsphere-csi, http-echo, opencost, nats, certificate-transparency, nri-nginx, splunk-otel-collector, kpt, goreleaser, step-issuer, pgtimetable, xeol, cni-plugins, cloud-provider-aws, teleport, mods,...
GHSA-XQ5J-9R39-C3VF vulnerabilities
Vulnerabilities for packages: prometheus-adapter, prometheus, opencost, nats, splunk-otel-collector, kpt, goreleaser, pgtimetable, teleport, sftpgo, zot, crossplane, telegraf, k8s-device-plugin, metrics-server, rabbitmq-cluster-operator, helm-operator, minio, cert-manager, zarf, atlantis, thanos,...
CVE-2026-40050
CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...
CrowdStrike LogScale security vulnerabilities
CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...
CVE-2026-40050: Missing Authentication for Critical Function
CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...
CVE-2026-35206 vulnerabilities
Vulnerabilities for packages: harbor, nova, cert-manager-cmctl, k9s, helm-set-status, eksctl, consul-k8s, trivy, kots, helm, envoy-gateway, helm-mapkubeapis, cilium-cli, helm-push, zot, k8sgpt, chart-testing, k8ssandra-client, linkerd2, istio, cluster-api-helm-controller, flux-source-controller,...
GHSA-HR2V-4R36-88HR vulnerabilities
Vulnerabilities for packages: harbor, nova, cert-manager-cmctl, k9s, helm-set-status, eksctl, consul-k8s, trivy, kots, helm, envoy-gateway, helm-mapkubeapis, cilium-cli, helm-push, zot, k8sgpt, chart-testing, k8ssandra-client, linkerd2, istio, cluster-api-helm-controller, flux-source-controller,...
GHSA-HR2V-4R36-88HR vulnerabilities
Vulnerabilities for packages: headlamp-fips, helm-set-status, chart-testing-fips, chart-testing, jfrog-cli, gitlab-operator-fips, helm-diff-fips, envoy-gateway-fips, helm-operator-fips, headlamp, k9s-fips, rancher-fleet, cerbos, linkerd2, trivy-operator-fips, pluto, zot, chartmuseum-fips,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: hey, prometheus, mesosphere-vsphere-csi, aws-node-termination-handler, kubernetes-csi-node-driver-registrar, http-echo, opencost, mountpoint-s3-csi-driver, nri-nginx, goreleaser, step-issuer, pgtimetable, temporal, gitsign, migrate, node-problem-detector, wal-g,...
CVE-2026-35206 vulnerabilities
Vulnerabilities for packages: headlamp-fips, helm-set-status, chart-testing-fips, chart-testing, jfrog-cli, gitlab-operator-fips, helm-diff-fips, envoy-gateway-fips, helm-operator-fips, headlamp, k9s-fips, rancher-fleet, cerbos, linkerd2, trivy-operator-fips, pluto, zot, chartmuseum-fips,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: prometheus, mesosphere-vsphere-csi, kubernetes-csi-external-provisioner, kubernetes-csi-node-driver-registrar, http-echo, opencost, mountpoint-s3-csi-driver, nri-nginx, step-issuer, pgtimetable, migrate, node-problem-detector, nri-jmx, wal-g, nri-mongodb,...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: prometheus, mesosphere-vsphere-csi, kubernetes-csi-external-provisioner, kubernetes-csi-node-driver-registrar, http-echo, opencost, mountpoint-s3-csi-driver, nri-nginx, step-issuer, pgtimetable, migrate, node-problem-detector, nri-jmx, wal-g, nri-mongodb,...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: prometheus, mesosphere-vsphere-csi, kubernetes-csi-external-provisioner, kubernetes-csi-node-driver-registrar, http-echo, opencost, mountpoint-s3-csi-driver, nri-nginx, step-issuer, pgtimetable, migrate, node-problem-detector, nri-jmx, wal-g, nri-mongodb,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: prometheus-adapter, crossplane-provider-aws-firehose, tflint, prometheus, mesosphere-vsphere-csi, restic, kubernetes-csi-external-provisioner, kubernetes-csi-node-driver-registrar, opencost, terraform-provider-sendgrid, kpt, step-issuer, cluster-api-gcp-controller,...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: prometheus-adapter, crossplane-provider-aws-firehose, tflint, prometheus, mesosphere-vsphere-csi, restic, kubernetes-csi-external-provisioner, kubernetes-csi-node-driver-registrar, opencost, terraform-provider-sendgrid, kpt, step-issuer, cluster-api-gcp-controller,...
GHSA-9H8M-3FM2-QJRQ vulnerabilities
Vulnerabilities for packages: azure-workload-identity-webhook, cass-operator-fips, datadog-operator-fips, traefik-fips, trivy-operator-fips, zot, kyverno-notation-aws-fips, cluster-api-ipam-provider-in-cluster, tflint, spire-server, aws-node-termination-handler, gatekeeper, grafana-fips,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-firehose, gptscript, witness, goreleaser, xeol, trivy, gitsign, openbao, wal-g, helm-push, lazygit, buildkitd, ratify, crossplane, trufflehog, sops, zot, flux-kustomize-controller, flux-helm-controller, boring-registry,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-firehose, gptscript, witness, goreleaser, xeol, trivy, gitsign, openbao, wal-g, helm-push, lazygit, buildkitd, ratify, crossplane, trufflehog, sops, zot, flux-kustomize-controller, flux-helm-controller, boring-registry,...