GO-2026-6094 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, kwok, kubernetes-csi-external-attacher, cilium, grafana, cluster-api-helm-controller, fluent-operator, rancher-agent, cert-manager, external-secrets-operator, openfga, istio, yunikorn-k8shim, kubernetes-csi-external-resizer, spicedb,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: emissary, rancher-fleet, rancher-system-agent, yunikorn-k8shim, kubernetes-csi-driver-hostpath, cloud-provider-gcp-cloud-controller-manager, docker-machine-driver-harvester, vcluster, mesosphere-vsphere-csi...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: envconsul, nri-redis, prometheus, swagger, nuclei, kubernetes-dashboard-auth, nri-haproxy, kube-bench, argo-events, nova, cluster-api-helm-controller, chartmuseum, rabbitmq-messaging-topology-operator, harbor-cli, kubernetes-dashboard, dex, terraform-provider-azapi,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, kwok, kubernetes-csi-external-attacher, cilium, grafana, cluster-api-helm-controller, fluent-operator, rancher-agent, cert-manager, external-secrets-operator, openfga, istio, yunikorn-k8shim, kubernetes-csi-external-resizer, spicedb,...

Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017342 advisory. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows...

RHCOS 4 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2594 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

RHCOS 4 : OpenShift Container Platform 4.4.8 openshift (RHSA-2020:2448)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2448 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: emissary, opencost, etcd, osv-scanner, terraform-provider-tls-fips, syncthing-fips, cluster-proportional-autoscaler, rke2-cloud-provider-fips, syncthing, crossplane-provider-aws-ssm, k9s-fips, amazon-eks-ami, aws-nuke, dex, omnibump, hugo-extended, prometheus-adapter...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: opencost, osv-scanner, cluster-proportional-autoscaler, gops-fips, flannel-cni-plugin-fips, falco-exporter-fips, go-jsonnet, kubernetes-release, nri-mysql, terraform-provider-sendgrid, fq, kubernetes-dashboard-metrics-scraper, prometheus-statsd-exporter-fips,...

Cisco Catalyst SD-WAN Controller Authentication Bypass (cisco-sa-sdwan-rpa-EHchtZk)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an...

GO-2025-4240 Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes

Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes...

Portworx Half-Blind SSRF in kube-controller-manager

...

CVE-2025-13281

A half-blind Server-Side Request Forgery SSRF found in kube-controller-manager that can be triggered when using the legacy in-tree Portworx StorageClass. An authorized user with sufficient privileges can cause the controller to make requests to internal, host-network–accessible endpoints,...

kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

GHSA-R6J8-C6R2-37RR kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

EUVD-2025-203310

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

DEBIAN-CVE-2025-13281

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

AZL-72382 CVE-2025-13281 affecting package kubernetes for versions less than 1.30.10-18

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

AZL-72386 CVE-2025-13281 affecting package kubernetes for versions less than 1.28.4-21

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

CVE-2025-13281

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...