CVE-2026-40050

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CrowdStrike LogScale 安全漏洞

CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: tigera-operator, eksctl, helm-mapkubeapis, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, headlamp, flux-source-controller, cerbos, flux, tw, kuma, cert-manager-cmctl, kubescape, helm-operator, consul-k8s, envoy-gatewa...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: tigera-operator, eksctl, helm-mapkubeapis, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, headlamp, flux-source-controller, cerbos, flux, tw, kuma, cert-manager-cmctl, kubescape, helm-operator, consul-k8s, envoy-gatewa...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: rancher-fleet, chart-testing, k9s-fips, kubescape-server-fips, linkerd2-fips, cloudbeat, trivy-fips, chaos-mesh, cluster-api-helm-controller-fips, zot, consul-k8s, chart-testing-fips, headlamp-fips, flux, istio, headlamp, helm-set-status, k8ssandra-client, cerbos-fip...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: rancher-fleet, chart-testing, k9s-fips, kubescape-server-fips, linkerd2-fips, cloudbeat, trivy-fips, chaos-mesh, cluster-api-helm-controller-fips, zot, consul-k8s, chart-testing-fips, headlamp-fips, flux, istio, headlamp, helm-set-status, k8ssandra-client, cerbos-fip...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kafka-proxy, cloudprober, terraform-provider-sendgrid, prometheus-adapter, apache-exporter, kyverno-policy-reporter-ui, secrets-store-csi-driver-provider-gcp, step-ca, thanos, prometheus-pushgateway, apisix-ingress-controller, kube-metrics-adapter,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kafka-proxy, cloudprober, terraform-provider-sendgrid, prometheus-adapter, apache-exporter, kyverno-policy-reporter-ui, secrets-store-csi-driver-provider-gcp, step-ca, thanos, prometheus-pushgateway, apisix-ingress-controller, kube-metrics-adapter,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, thanos, prometheus-pushgateway, kubernetes-ingress-defaultbackend, polaris, trino, cluster-api-provider-vsphere, buildah, azcopy, dataplaneapi, mattermost, fuse-overlayfs-snapshotter, timestamp-authority, grafana-rollout-operator, vale,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, thanos, prometheus-pushgateway, kubernetes-ingress-defaultbackend, polaris, trino, cluster-api-provider-vsphere, buildah, azcopy, dataplaneapi, mattermost, fuse-overlayfs-snapshotter, timestamp-authority, grafana-rollout-operator, vale,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: render-template, kyverno-policy-reporter-ui, thanos, prometheus-pushgateway, kubernetes-ingress-defaultbackend, polaris, trino, cluster-api-provider-vsphere, buildah, azcopy, dataplaneapi, mattermost, fuse-overlayfs-snapshotter, timestamp-authority,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, docker-compose-fips, cluster-api-provider-vsphere, k8sgpt, temporal-server, velero, tkn, kyverno-policy-reporter-plugins-kyverno-fips, witness, keda, terragrunt, cloudprober-fips, jaeger-operator-fips, eck-operator-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: q, flux-kustomize-controller, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, aactl, crossplane-provider-aws-lambda, argo-events, docker-cli-buildx, buildkitd, trivy-operator, opentofu, extism,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: q, flux-kustomize-controller, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, aactl, crossplane-provider-aws-lambda, argo-events, docker-cli-buildx, buildkitd, trivy-operator, opentofu, extism,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, crossplane-provider-aws-s3, cloudbeat, crossplane-provider-aws-lambda, terraform-provider-azuread-fips, crossplane-provider-aws-cognitoidentity-fips, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-efs-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, crossplane-provider-aws-s3, cloudbeat, crossplane-provider-aws-lambda, terraform-provider-azuread-fips, crossplane-provider-aws-cognitoidentity-fips, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-efs-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: gitleaks, docker-compose-fips, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8sgpt, terraform-provider-acme-fips, vault-secrets-operator, cargobump, kube-fluentd-operator, zabbix-agent2, terraform-provider-azuread-fips, velero, doppler-kubernetes-operato...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: gitleaks, docker-compose-fips, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8sgpt, terraform-provider-acme-fips, vault-secrets-operator, cargobump, kube-fluentd-operator, zabbix-agent2, terraform-provider-azuread-fips, velero, doppler-kubernetes-operato...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: gitleaks, docker-compose-fips, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8sgpt, terraform-provider-acme-fips, vault-secrets-operator, kube-fluentd-operator, zabbix-agent2, terraform-provider-azuread-fips, doppler-kubernetes-operator, tkn, gh,...