CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: nri-apache, buildkitd, conjur-cli, grafana-operator, cni-plugins, pgtimetable, dive, ko, kubeflow, addon-resizer, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: nri-apache, buildkitd, conjur-cli, grafana-operator, pgtimetable, dive, ko, kubeflow, addon-resizer, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark, cert-manager-csi-driver,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: nri-apache, buildkitd, conjur-cli, grafana-operator, cni-plugins, pgtimetable, dive, ko, kubeflow, addon-resizer, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: grafana-operator, pgtimetable, ko, fluent-bit-plugin-loki, kubernetes-dashboard, azure-service-operator, k3s, teleport, istio, nats, kubernetes, gatekeeper, goreleaser, coredns, runc, cluster-autoscaler, prometheus-operator, kpt, trino, nerdctl, skopeo,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: grafana-operator, pgtimetable, ko, fluent-bit-plugin-loki, kubernetes-dashboard, azure-service-operator, k3s, teleport, istio, nats, kubernetes, gatekeeper, goreleaser, coredns, runc, cluster-autoscaler, prometheus-operator, kpt, trino, nerdctl, skopeo,...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: buildkitd, ko, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark, cert-manager-csi-driver, lazydocker, teleport, istio, kubernetes, gatekeeper, goreleaser, coredns,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: grafana-operator, pgtimetable, ko, fluent-bit-plugin-loki, kubernetes-dashboard, azure-service-operator, k3s, teleport, istio, nats, kubernetes, gatekeeper, goreleaser, coredns, runc, cluster-autoscaler, prometheus-operator, kpt, trino, nerdctl, skopeo,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: grafana-operator, pgtimetable, ko, fluent-bit-plugin-loki, kubernetes-dashboard, azure-service-operator, k3s, teleport, istio, nats, kubernetes, gatekeeper, goreleaser, coredns, runc, cluster-autoscaler, prometheus-operator, kpt, trino, nerdctl, skopeo,...

CVE-2026-40050

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CrowdStrike LogScale 安全漏洞

CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: flux, headlamp, rancher-fleet, helm-push, helm-operator, cerbos, cluster-api-helm-controller, kube-arangodb, helm-set-status, consul-k8s, chart-testing, k9s, pluto, teleport, zarf, kubescape, istio, flux-source-controller, envoy-gateway, helm-docs, trivy-operator, tw...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux, headlamp, rancher-fleet, helm-push, helm-operator, cerbos, cluster-api-helm-controller, kube-arangodb, helm-set-status, consul-k8s, chart-testing, k9s, pluto, teleport, zarf, kubescape, istio, flux-source-controller, envoy-gateway, helm-docs, trivy-operator, tw...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: envoy-gateway, cilium-cli, kube-arangodb-fips, chart-testing-fips, chaos-mesh-fips, cluster-api-helm-controller-fips, gitlab-operator, headlamp-fips, helm-push, k8ssandra-client, kots, kuma, cluster-api-helm-controller, cerbos, teleport, flux-source-controller-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, docker-cli-buildx, grafana-operator, newrelic-infrastructure-agent, kyverno-notation-aws, addon-resizer, mailpit, cue, kubernetes-dashboard, vault-env, polaris, nri-elasticsearch, flux-source-controller, sonobuoy, regclient,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: envoy-gateway, cilium-cli, kube-arangodb-fips, chart-testing-fips, chaos-mesh-fips, cluster-api-helm-controller-fips, gitlab-operator, headlamp-fips, helm-push, k8ssandra-client, kots, kuma, cluster-api-helm-controller, cerbos, teleport, flux-source-controller-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kapp-controller, spicedb, cass-operator, terraform-provider-random, gitlab-runner, newrelic-infrastructure-agent, step-kms-plugin, kubernetes-event-exporter, kube-arangodb, fscrypt, dkron, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kapp-controller, spicedb, cass-operator, terraform-provider-random, gitlab-runner, newrelic-infrastructure-agent, step-kms-plugin, kubernetes-event-exporter, kube-arangodb, fscrypt, dkron, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, gitlab-runner, grafana-operator, newrelic-infrastructure-agent, kubelet-csr-approver, addon-resizer, kubernetes-dashboard, gogatekeeper, vault-env, polaris, nri-elasticsearch, flux-source-controller, sonobuoy, regclient, coredns, kaniko,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, gitlab-runner, grafana-operator, newrelic-infrastructure-agent, kubelet-csr-approver, addon-resizer, kubernetes-dashboard, gogatekeeper, vault-env, polaris, nri-elasticsearch, flux-source-controller, sonobuoy, regclient, coredns, kaniko,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, gitlab-runner, grafana-operator, newrelic-infrastructure-agent, kubelet-csr-approver, addon-resizer, kubernetes-dashboard, gogatekeeper, vault-env, polaris, nri-elasticsearch, flux-source-controller, sonobuoy, regclient, coredns, kaniko,...