11553 matches found
CVE-2026-39820 vulnerabilities
Vulnerabilities for packages: metrics-server-fips, prometheus-alertmanager-fips, crossplane-provider-aws-lightsail-fips, volcano-fips, kuma, knative-serving, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-guardduty, prometheus-podman-exporter-fips,...
CVE-2026-42499 vulnerabilities
Vulnerabilities for packages: metrics-server-fips, prometheus-alertmanager-fips, crossplane-provider-aws-lightsail-fips, volcano-fips, kuma, knative-serving, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-guardduty, prometheus-podman-exporter-fips,...
CVE-2026-39817 vulnerabilities
Vulnerabilities for packages: kubo, timestamp-authority, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, redka, amazon-k8s-cni, istio, crane, grafana-pyroscope, azure-service-operator, grafana-mimir, libnvidia-container, authservice, sftpgo-plugin-auth, nri-nginx, nri-rabbitmq,...
CVE-2026-39820 vulnerabilities
Vulnerabilities for packages: timestamp-authority, kube-fluentd-operator, dask-gateway, redka, istio, grafana-pyroscope, azure-service-operator, libnvidia-container, kubernetes-dashboard, kaf, tekton-chains, minio-object-browser, buildah, prometheus-adapter, prometheus-operator, kubevela,...
CVE-2026-39823 vulnerabilities
Vulnerabilities for packages: kubo, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, redka, istio, grafana-pyroscope, azure-service-operator, grafana-mimir, libnvidia-container, authservice, sftpgo-plugin-auth, kubernetes-dashboard, kaf, guac, step, kube-arangodb, tekton-chains,...
CVE-2026-39836 vulnerabilities
Vulnerabilities for packages: kubo, timestamp-authority, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, redka, amazon-k8s-cni, istio, crane, grafana-pyroscope, azure-service-operator, grafana-mimir, libnvidia-container, authservice, sftpgo-plugin-auth, nri-nginx, nri-rabbitmq,...
GHSA-2283-WF8C-RW8R vulnerabilities
Vulnerabilities for packages: kubo, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, redka, istio, grafana-pyroscope, azure-service-operator, grafana-mimir, libnvidia-container, authservice, sftpgo-plugin-auth, kubernetes-dashboard, kaf, guac, step, kube-arangodb, tekton-chains,...
CVE-2026-42501 vulnerabilities
Vulnerabilities for packages: kubo, timestamp-authority, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, redka, amazon-k8s-cni, istio, crane, grafana-pyroscope, azure-service-operator, grafana-mimir, libnvidia-container, authservice, sftpgo-plugin-auth, nri-nginx, nri-rabbitmq,...
CVE-2026-42499 vulnerabilities
Vulnerabilities for packages: timestamp-authority, kube-fluentd-operator, dask-gateway, redka, istio, grafana-pyroscope, azure-service-operator, libnvidia-container, kubernetes-dashboard, kaf, tekton-chains, minio-object-browser, buildah, prometheus-adapter, prometheus-operator, kubevela,...
GHSA-P9H5-JM8X-MJM5 vulnerabilities
Vulnerabilities for packages: timestamp-authority, kube-fluentd-operator, dask-gateway, redka, istio, grafana-pyroscope, azure-service-operator, libnvidia-container, kubernetes-dashboard, kaf, tekton-chains, minio-object-browser, buildah, prometheus-adapter, prometheus-operator, kubevela,...
GHSA-8G2R-HHVJ-MV99 vulnerabilities
Vulnerabilities for packages: kubo, timestamp-authority, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, redka, amazon-k8s-cni, istio, crane, grafana-pyroscope, azure-service-operator, grafana-mimir, libnvidia-container, authservice, sftpgo-plugin-auth, nri-nginx, nri-rabbitmq,...
GHSA-QF3Q-3H68-MMH2 vulnerabilities
Vulnerabilities for packages: kubo, timestamp-authority, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, redka, amazon-k8s-cni, istio, crane, grafana-pyroscope, azure-service-operator, grafana-mimir, libnvidia-container, authservice, sftpgo-plugin-auth, nri-nginx, nri-rabbitmq,...
GHSA-QC64-M6C2-V4X7 vulnerabilities
Vulnerabilities for packages: kubo, timestamp-authority, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, redka, amazon-k8s-cni, istio, crane, grafana-pyroscope, azure-service-operator, grafana-mimir, libnvidia-container, authservice, sftpgo-plugin-auth, nri-nginx, nri-rabbitmq,...
GHSA-XQ5J-9R39-C3VF vulnerabilities
Vulnerabilities for packages: timestamp-authority, kube-fluentd-operator, dask-gateway, redka, istio, grafana-pyroscope, azure-service-operator, libnvidia-container, kubernetes-dashboard, kaf, tekton-chains, minio-object-browser, buildah, prometheus-adapter, prometheus-operator, kubevela,...
GHSA-8WXP-XXP2-RCGX Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size
Impact The Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitrarily large request body, potentially causing the webhook server to be killed by OOM. All Volcano deployments with the webhook...
Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size
Impact The Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitrarily large request body, potentially causing the webhook server to be killed by OOM. All Volcano deployments with the webhook...
ingress-nginx Configuration Injection
A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible t...
📄 Apache Airflow Databricks Provider Certificate Verification Bypass
The Apache Airflow Databricks Provider package disables TLS certificate verification when communicating with the Kubernetes API server during federated token exchange. Both the synchronous and asynchronous code paths use verify=False / ssl=False, allowing any attacker with network access within t...
PT-2026-39242
Name of the Vulnerable Software and Affected Versions Volcano versions prior to 1.14.2 Volcano versions prior to 1.13.3 Volcano versions prior to 1.12.4 Description The Volcano webhook server fails to enforce a size limit on incoming HTTP request bodies. This allows any in-cluster pod capable of...
PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage
Palo Alto Networks has disclosed that threat actors may have attempted to unsuccessfully exploit a recently disclosed critical security flaw as early as April 9, 2026. The vulnerability in question is CVE-2026-0300 CVSS score: 9.3/8.7, a buffer overflow vulnerability in the User-ID Authentication...