CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, envoy-gateway, harbor, kuma, nova, trivy-operator, helm-push, consul-k8s, flux-source-controller, helm-mapkubeapis, cilium-cli, headlamp, zarf, k9s, cerbos, kubescape, linkerd2, cluster-api-helm-controller, chartmuseum, tw, helm-operator,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, envoy-gateway, harbor, kuma, nova, trivy-operator, helm-push, consul-k8s, flux-source-controller, helm-mapkubeapis, cilium-cli, headlamp, zarf, k9s, cerbos, kubescape, linkerd2, cluster-api-helm-controller, chartmuseum, tw, helm-operator,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, envoy-gateway, k9s-fips, chaos-mesh, helm-set-status, cluster-api-helm-controller, consul-k8s-fips, tw, cloudbeat-fips, rancher-fleet, trivy-fips, kube-arangodb-fips, chaos-mesh-fips, harbor, kubescape-server, rancher-fleet-fips, consul-k8s,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, libnvidia-container, kpt, victoriametrics-cluster, sbom-convert, oras, metacontroller, docker-credential-ecr-login, ytt, rancher-system-upgrade-controller, prometheus-operator, rook, flux-notification-controller, verticadb-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, libnvidia-container, kpt, victoriametrics-cluster, oras, metacontroller, docker-credential-ecr-login, ytt, rancher-system-upgrade-controller, prometheus-operator, rook, flux-notification-controller, verticadb-operator, docker-cli-build...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, libnvidia-container, kpt, victoriametrics-cluster, oras, metacontroller, docker-credential-ecr-login, ytt, rancher-system-upgrade-controller, prometheus-operator, rook, flux-notification-controller, verticadb-operator, docker-cli-build...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, envoy-gateway, k9s-fips, chaos-mesh, helm-set-status, cluster-api-helm-controller, consul-k8s-fips, tw, cloudbeat-fips, rancher-fleet, trivy-fips, kube-arangodb-fips, chaos-mesh-fips, harbor, kubescape-server, rancher-fleet-fips, consul-k8s,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: chartmuseum, gatekeeper-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, kargo, redka, seaweedfs, kpt, gomplate, knative-eventing-fips, libnvidia-container, extism, azuredisk-csi-fips, gitness, amazon-ssm-agent-fips, docker-cli-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: chartmuseum, gatekeeper-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, kargo, redka, seaweedfs, kpt, gomplate, knative-eventing-fips, libnvidia-container, extism, azuredisk-csi-fips, gitness, amazon-ssm-agent-fips, docker-cli-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, gatekeeper-fips, timestamp-authority-fips, fuse-overlayfs-snapshotter, karpenter, kuberlr, azurefile-csi, cilium, trivy-fips, kubevirt-cdi-controller-fips, aws-sigv4-proxy, kargo, local-static-provisioner, terraform-provider-tls-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: chartmuseum, azurefile-csi, seaweedfs, kpt, postgres-operator-fips, chronyexporter, libnvidia-container, azuredisk-csi-fips, sftpgo-plugin-pubsub, terraform-ls, x509-certificate-exporter-fips, splunk-otel-collector, nri-nagios-fips, dataplaneapi-fips, neuvector,...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the AdminService/StreamWorkflowReplicationMessages endpoint. An attacker can access replication streams and exfiltrate data by connecting to the frontend gRPC server without providing...

EUVD-2026-21607

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

EUVD-2026-20876

LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin...

LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

Summary A restricted TLS certificate user can escalate to cluster admin by changing their certificate type from client to server via PUT/PATCH to /1.0/certificates/fingerprint. The non-admin guard and reset block in doCertificateUpdate fail to validate or reset the Type field, allowing a...

GHSA-C3H3-89QF-JQM5 LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

Summary A restricted TLS certificate user can escalate to cluster admin by changing their certificate type from client to server via PUT/PATCH to /1.0/certificates/fingerprint. The non-admin guard and reset block in doCertificateUpdate fail to validate or reset the Type field, allowing a...

EUVD-2026-20965

Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource...

GHSA-99J8-WV67-4C72 Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource

Impact A developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace — production database credentials, API keys, service tokens — with a single kubectl apply. The operator reads the victim's secret using its ClusterRole and write...

Discourse Information Disclosure Vulnerability (CNVD-2026-17250)

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse has an information leakage vulnerability , the vulnerability stems from the discourse-subscriptions plugin leaks stripe API key...