Missing Authentication

Overview Affected versions of this package are vulnerable to Missing Authentication in the xDS interface. An attacker can access sensitive configuration data, including certificate information, backend service details, routing rules, and cluster metadata, by connecting to the exposed port without...

kgateway is missing xDS authorization

Summary The xDS interface in Kgateway versions 2.0.0 through 2.0.4 lacks authentication, allowing any client with unrestricted network access to the xDS port to retrieve potentially sensitive configuration data including certificate data, backend service information, routing rules, and cluster...

OS Command Injection

github.com/chaos-mesh/chaos-mesh is vulnerable to OS command Injection. The vulnerability is due to unsanitized input handling in the cleanTcs mutation due to user-controlled fields being passed to operating-system command execution without proper validation. An attacker can use this to perform...

RHSA-2025:19512 Red Hat Security Advisory: pcs security update

Bulletin has no description...

RHSA-2025:19513 Red Hat Security Advisory: pcs security update

Bulletin has no description...

OS Command Injection

github.com/chaos-mesh/chaos-mesh is vulnerable to OS command injection. The vulnerability is due to improper input validation in the cleanIptables mutation, which allows an unauthenticated in-cluster attacker to execute arbitrary commands and achieve remote code execution across the cluster...

Improper Authentication Exposure

github.com/chaos-mesh/chaos-mesh is vulnerable to improper authentication exposure. The vulnerability is due to the Chaos Controller Manager exposing an unauthenticated GraphQL debugging server to the entire Kubernetes cluster, which allows an attacker to kill arbitrary processes in any pod...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: envconsul, contour, swagger, infinispan-operator, rancher-loglevel, k8sgpt-operator, nerdctl, nova, neuvector-dbgen, protoc-gen-go-grpc, ytt, flannel, nsc, kubernetes-event-exporter, xcover, redka, cri-tools, certificate-transparency, cfssl, falco-exporter, xcaddy,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: envconsul, promxy, contour, kwok, infinispan-operator, age, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, mockery, rancher-loglevel, kube-logging-operator-custom-runner, kube-bench, nerdctl, cadvisor, checksec,...