trivy-plugin-kubectl

trivy-plugin-kubectl Un plugin de Trivy que escanea las imágenes de un recurso de Kubernetes Instalación root@kitploit: $ trivy plugin install github.com/aquasecurity/trivy-plugin-kubectl $ trivy kubectl -h Usage: trivy kubectl -h,--help TYPE NAME TRIVY OPTION A Trivy plugin that scans the images...

trivy

Trivy GitLab CI Component A GitLab CI component for Trivy — the all-in-one security scanner covering container images, filesystems, repositories, Kubernetes clusters, SBOMs, and license compliance. Plug these templates directly into your pipelines to get repeatable scans, GitLab-native reports, a...

CVE-2026-87053

A flaw was found in operator-sdk-builder. Due to an oversight in the Containerfile configuration, the final built container image runs with root privileges by default. This increases the attack surface of the container, as any process executed within it will have elevated permissions. If a...

FRAGNESIA-Charan-cve-2026-46300

Arquitectura Charantej: Laboratorio de Staging de Contenedores Hardened y Telemetría de Llamadas al Sistema Un marco de trabajo empresarial de defensa en profundidad para la contención de contenedores y telemetría de seguridad en tiempo de ejecución. Diseñado desde la perspectiva de un Arquitecto...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – Exploit totalmente armado para NVIDIA Container Toolkit Referencias https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

CVE-2026-61711

A flaw was found in BuildKit. A custom frontend could craft a build request with an invalid security mode, leading to the disabling of Seccomp and AppArmor protections for the build container. This bypasses the intended sandbox mechanisms, potentially allowing for broader impact within the...

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

Astra Linux – Vulnerability in runc-app

Runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2, and 1.4.0-rc.2, an attacker can trick runc into redirecting write operations to /proc to other procfs files by using a racing container with shared mounts. We have also verified th...

CVE-2026-62313

Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of restricted.containers.privilege=isolated can be trivially bypassed, allowing a user to create a non-isolated shared host idmap container in a project that is configured to forbid them. Th...

BuildKit: Custom frontend could bypass Seccomp/AppArmor

Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...

CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

GHSA-PRG7-HCFM-MFCR vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, mycli, openstack-keystone-2025.2-fips, netbox, openstack-glance-2025.2, dbt-bigquery, airflow-postgres-fips, datahub-ingestion-fips, openstack-nova-2025.1, superset, apache-beam-python-3.14-sdk, authentik-fips,...

GHSA-HQVF-45JJ-MCCQ vulnerabilities

Vulnerabilities for packages: localstack...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: tigera-operator, mongodb-kubernetes-operator-fips, volcano, crossplane-provider-aws-wafregional-fips, kserve-localmodelnode-agent-fips, vexctl, grafana-rollout-operator, crossplane-provider-aws-imagebuilder, kubernetes-dashboard-metrics-scraper, neuvector-dbgen-fips,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: stern, rekor, fscrypt, containerd, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin, pulumi-kubernetes-operator, harbor, nri-prometheus, gobuster, sftpgo-plugin-auth, terraform-provider-acme,...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: tigera-operator, volcano, crossplane-provider-aws-wafregional-fips, kserve-localmodelnode-agent-fips, prometheus-blackbox-exporter, grafana-rollout-operator, crossplane-provider-aws-imagebuilder, kubernetes-dashboard-metrics-scraper,...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: containerd, spire-server, aactl, falco-no-driver, k3s, zot, k3d, kyverno, snyk-cli, k8s-device-plugin, nerdctl, kots...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: scuttle-fips, kserve-localmodelnode-agent-fips, kubernetes-dashboard-metrics-scraper, neuvector-dbgen-fips, ratify-fips, kubevirt-cdi-operator, apko-fips, aws-otel-collector-fips, prometheus-nats-exporter-fips, crossplane-provider-aws-kms, mapotf-fips,...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: tigera-operator, mongodb-kubernetes-operator-fips, volcano, crossplane-provider-aws-wafregional-fips, kserve-localmodelnode-agent-fips, vexctl, grafana-rollout-operator, crossplane-provider-aws-imagebuilder, kubernetes-dashboard-metrics-scraper, neuvector-dbgen-fips,...