434 matches found
hardening-k8s-containers
故意存在漏洞的笔记应用 此仓库包含一个非常简单且存在漏洞的应用程序，用于演示将该应用程序使用默认设置部署到 Kubernetes 集群，与添加一些额外安全设置（这些设置不会 修复应用程序的漏洞，但会限制攻击者进行恶意操作）之间的差异。 要自行尝试，你需要访问一个 Kubernetes 集群，因为此应用程序高度脆弱，你绝对不希望 将其部署到真实集群中，除非该集群已得到适当隔离。 Minikube 如果你想使用 minikube，可以直接运行提供的 init.sh 脚本，或者逐步操作： 启动 minikube，至少需要 cni 插件 root@kitploit: minikube start...
Astra Linux – Vulnerability in Golang-github-appc-cni
A flaw in path name limitations was identified in containernetworking/cni in versions prior to 0.8.1. When specifying the plugin to be loaded in the ‘type’ field of the network configuration, it is possible to use special elements such as “/” separators to reference binaries located elsewhere on...
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: kube-vip, cni-plugins...
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: cni-plugins, kube-vip-fips, kube-vip, amazon-k8s-cni-fips, cni-plugins-fips...
GO-2026-5876 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GO-2024-2922 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips, hubble, hubble-fips...
GO-2025-3416 vulnerabilities
Vulnerabilities for packages: cilium, hubble-ui, hubble, cilium-fips, hubble-fips, hubble-ui-backend-fips...
GO-2025-3465 vulnerabilities
Vulnerabilities for packages: calico, rancher-webhook, argo-cd-fips, argocd-image-updater-fips, spark-operator, kubernetes-csi-driver-hostpath, cluster-autoscaler-fips, kubernetes-dns-node-cache-fips, spark-operator-fips, yunikorn-k8shim, emissary, argo-rollouts, ip-masq-agent, kapp,...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: go, flux-source-watcher, grafana-rollout-operator, nova, flux-helm-controller, nova-fips, flux-source-controller, terragrunt, grafana-operator, cluster-autoscaler-fips, cert-manager-fips, grafana-operator-fips, victoriametrics, flux-operator-fips,...
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: buildkitd, calico, flannel, istio-fips, datadog-agent-fips, nerdctl, k3s, multus-cni, kuma, datadog-agent, flannel-fips, buildah, istio, containerd-fips, rootlesskit, nerdctl-fips, multus-cni-fips, azure-ipam, podman, buildkitd-fips, amazon-k8s-cni-fips, docker,...
GO-2025-3415 vulnerabilities
Vulnerabilities for packages: hubble-ui...
GO-2024-2569 vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui...
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: rootlesskit, buildah, datadog-agent, flannel, nerdctl, istio, k3s, calico, docker, kuma, azure-ipam, podman, buildkitd, containerd, multus-cni...
GO-2024-2598 vulnerabilities
Vulnerabilities for packages: prometheus-operator, kubevela, cue, dagger, gomplate, dive, aws-efs-csi-driver, kubernetes-dns-node-cache, regclient, wait-for-port, nri-kafka, esbuild, buildkitd, kubernetes-csi-external-resizer, fq, nodetaint, paranoia, configmap-reload, mongo-tools,...
GO-2024-2599 vulnerabilities
Vulnerabilities for packages: prometheus-operator, kubevela, cue, dagger, gomplate, dive, aws-efs-csi-driver, kubernetes-dns-node-cache, regclient, wait-for-port, nri-kafka, esbuild, buildkitd, kubernetes-csi-external-resizer, fq, nodetaint, paranoia, configmap-reload, mongo-tools,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: apache-exporter, azure-workload-identity-webhook, cloud-provider-azure, buildah, kubevela, skopeo, gomplate, cluster-api, docker-machine-driver-linode, aws-efs-csi-driver, nova, redka, cloud-sql-proxy, argo-events, kapp-controller, crossplane-provider-aws-sns,...
GO-2026-4984 vulnerabilities
Vulnerabilities for packages: apache-exporter, ini-file, cloud-provider-azure, buildah, kubevela, prometheus-operator, dagger, skopeo, victoriametrics, opencost, zot, dive, nova, redka, cloud-sql-proxy, keda, regclient, argo-events, buildkitd, datadog-agent, incert, octo-sts, trino, paranoia,...
GO-2023-2382 vulnerabilities
Vulnerabilities for packages: mage, scorecard, smarter-device-manager, aws-flb-firehose, grpcurl, sonobuoy, nsc, sbom-scorecard, oras, go-bindata, hubble-ui, wait-for-port, flannel-cni-plugin, nri-discovery-kubernetes, kind, go-md2man, slsa-verifier, vertical-pod-autoscaler, configmap-reload,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: cluster-api-azure-controller, ini-file, prometheus-operator, k8sgateway, zot, dive, helm-set-status, nova, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port, argo-events, buildkitd, kapp-controller, aws-privateca-issuer, nodetaint, mongo-tools,...
