11536 matches found
GHSA-H74G-238J-357M vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, knative-serving-fips, grafana-alloy, kubevirt-cdi-uploadproxy-fips, kubo, go, seaweedfs-rocksdb, aws-flb-kinesis, cloud-provider-azure-fips, kots, fleet-server-fips, vault-fips, ansible-operator, kubernetes-dashboard, karma-fips, etcd,...
CVE-2026-42499 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sesv2, crossplane-provider-aws-rolesanywhere-fips, knative-serving-fips, cilium-certgen, crossplane-provider-aws-datasync, aws-flb-kinesis, nats-fips, nats, vault-fips, tkn-fips, vault, crossplane-provider-aws-dynamodb-fips, tekton-pipelines,...
CVE-2026-39820 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sesv2, crossplane-provider-aws-rolesanywhere-fips, knative-serving-fips, cilium-certgen, crossplane-provider-aws-datasync, aws-flb-kinesis, nats-fips, nats, vault-fips, tkn-fips, vault, crossplane-provider-aws-dynamodb-fips, tekton-pipelines,...
GHSA-P9H5-JM8X-MJM5 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sesv2, crossplane-provider-aws-rolesanywhere-fips, knative-serving-fips, cilium-certgen, crossplane-provider-aws-datasync, aws-flb-kinesis, nats-fips, nats, vault-fips, tkn-fips, vault, crossplane-provider-aws-dynamodb-fips, tekton-pipelines,...
GHSA-XQ5J-9R39-C3VF vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sesv2, crossplane-provider-aws-rolesanywhere-fips, knative-serving-fips, cilium-certgen, crossplane-provider-aws-datasync, aws-flb-kinesis, nats-fips, nats, vault-fips, tkn-fips, vault, crossplane-provider-aws-dynamodb-fips, tekton-pipelines,...
CVE-2026-42499 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kyverno, gatus, nats, ko, istio, kots, runc, k8sgpt, aws-flb-kinesis, cilium-cli, minio-object-browser, grafana-operator, containerd, redka, libnvidia-container, zarf, azure-service-operator, rabbitmq-cluster-operator, mattermost, flyte,...
CVE-2026-39820 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kyverno, gatus, nats, ko, istio, kots, runc, k8sgpt, aws-flb-kinesis, cilium-cli, minio-object-browser, grafana-operator, containerd, redka, libnvidia-container, zarf, azure-service-operator, rabbitmq-cluster-operator, mattermost, flyte,...
CVE-2026-42501 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kbld, argo-workflows, controller-gen, manifest-tool, kyverno, pdfcpu, kuma, gatus, nats, cni-plugins, http-echo, secrets-store-csi-driver-provider-azure, cert-exporter, vault-secrets-webhook, authservice, ko, temporal-server, istio, govulnchec...
GHSA-2283-WF8C-RW8R vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, argo-workflows, kyverno, kuma, gatus, secrets-store-csi-driver-provider-azure, vault-secrets-webhook, authservice, ko, temporal-server, istio, kots, cert-manager-csi-driver, xeol, runc, octo-sts, k8sgpt, sops, aws-flb-kinesis, cilium-cli,...
GHSA-8G2R-HHVJ-MV99 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kbld, argo-workflows, controller-gen, manifest-tool, kyverno, pdfcpu, kuma, gatus, nats, http-echo, secrets-store-csi-driver-provider-azure, cert-exporter, vault-secrets-webhook, authservice, ko, temporal-server, istio, govulncheck, kots,...
GHSA-QF3Q-3H68-MMH2 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kbld, argo-workflows, controller-gen, manifest-tool, kyverno, pdfcpu, kuma, gatus, nats, cni-plugins, http-echo, secrets-store-csi-driver-provider-azure, cert-exporter, vault-secrets-webhook, authservice, ko, temporal-server, istio, govulnchec...
GHSA-XQ5J-9R39-C3VF vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kyverno, gatus, nats, ko, istio, kots, runc, k8sgpt, aws-flb-kinesis, cilium-cli, minio-object-browser, grafana-operator, containerd, redka, libnvidia-container, zarf, azure-service-operator, rabbitmq-cluster-operator, mattermost, flyte,...
CVE-2026-39817 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kbld, argo-workflows, controller-gen, manifest-tool, kyverno, pdfcpu, kuma, gatus, nats, cni-plugins, http-echo, secrets-store-csi-driver-provider-azure, cert-exporter, vault-secrets-webhook, authservice, ko, temporal-server, istio, govulnchec...
CVE-2026-39823 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, argo-workflows, kyverno, kuma, gatus, secrets-store-csi-driver-provider-azure, vault-secrets-webhook, authservice, ko, temporal-server, istio, kots, cert-manager-csi-driver, xeol, runc, octo-sts, k8sgpt, sops, aws-flb-kinesis, cilium-cli,...
CVE-2026-39836 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kbld, argo-workflows, controller-gen, manifest-tool, kyverno, pdfcpu, kuma, gatus, nats, http-echo, secrets-store-csi-driver-provider-azure, cert-exporter, vault-secrets-webhook, authservice, ko, temporal-server, istio, govulncheck, kots,...
GHSA-P9H5-JM8X-MJM5 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kyverno, gatus, nats, ko, istio, kots, runc, k8sgpt, aws-flb-kinesis, cilium-cli, minio-object-browser, grafana-operator, containerd, redka, libnvidia-container, zarf, azure-service-operator, rabbitmq-cluster-operator, mattermost, flyte,...
GHSA-QC64-M6C2-V4X7 vulnerabilities
Vulnerabilities for packages: coredns, tekton-chains, kbld, argo-workflows, controller-gen, manifest-tool, kyverno, pdfcpu, kuma, gatus, nats, cni-plugins, http-echo, secrets-store-csi-driver-provider-azure, cert-exporter, vault-secrets-webhook, authservice, ko, temporal-server, istio, govulnchec...
GHSA-8WXP-XXP2-RCGX Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size
Impact The Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitrarily large request body, potentially causing the webhook server to be killed by OOM. All Volcano deployments with the webhook...
Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size
Impact The Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitrarily large request body, potentially causing the webhook server to be killed by OOM. All Volcano deployments with the webhook...
ingress-nginx Configuration Injection
A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible t...