PT-2026-77215

A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, it can approve arbitrary Certificate Signing Requests CSRs, which could lead to information disclosure and...

CVE-2026-66795 Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)

A flaw was found in the managedcluster-import-controller. The Certificate Signing Request CSR auto-approval logic improperly validates incoming CSRs, specifically by not inspecting the signer name or decoding the PEM-encoded x509 CSR. This vulnerability allows a privileged service account on a...

CVE-2026-66795

The managedcluster-import-controller's CSR auto-approver skips validation of signer name, certificate subject, and requester identity, letting a privileged spoke-cluster service account submit a malicious CSR and escalate to hub-cluster admin. CVSS 9.1 critical; no exploitation evidence provided....

GO-2026-5289 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-istio-csr-fips...

GO-2026-5363 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, istio, cert-manager-istio-csr-fips...

GO-2026-5363 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

GO-2026-5289 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, step-issuer, cert-manager-webhook-pdns, cert-exporter, cert-manager-istio-csr, aws-privateca-issuer...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, percona-server-mongodb-operator, step-issuer, cert-manager-webhook-pdns, mariadb-operator, cert-manager-istio-csr, aws-privateca-issuer, opentelemetry-operator, cert-manager-csi-driver...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: rclone, teleport, opentofu, external-secrets-operator, spqr, juicefs, zot, trufflehog, xeol, cert-manager-istio-csr, frp, seaweedfs, ratify, rancher-agent, terraform, gitea, gitlab-runner, cert-manager-cmctl, rancher-webhook, dex, flux-source-controller, grafana,...

GO-2026-4958 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kubevela, argocd-image-updater, vcluster, kubescape, zarf, kube-arangodb, teleport, headlamp, postgres-operator, cri-tools, aws-node-termination-handler, kubernetes, falcoctl, consul-k8s, skaffold, kpt, emissary, kubernetes-dashboard-api,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k3d, rabbitmq-messaging-topology-operator, crossplane-provider-aws-sns, vale, conftest, crossplane-provider-aws-cloudfront, cri-tools, ytt, nri-redis, git-credential-oauth, hydra, stakater-reloader, kubernetes-csi-driver-nfs, temporal-ui-server, extism,...

GO-2025-3485 vulnerabilities

Vulnerabilities for packages: k3d, rabbitmq-messaging-topology-operator, neuvector-scanner, kubescape, sigstore-scaffolding, falcoctl, hydra, temporal-ui-server, sftpgo, weaviate, skopeo, cert-manager-istio-csr, frp, step, boring-registry, containerd, terragrunt, dagdotdev, distribution,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kubescape, calico, flux-helm-controller, cert-manager-istio-csr, cluster-api-ipam-provider-in-cluster, kyverno, datadog-agent, fluent-operator, rancher, tekton-chains, helm-operator, telegraf, crossplane, spicedb, kubernetes-csi-external-snapshotter, kapp-controller,...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kuberay-operator, percona-server-mongodb-operator, step-issuer, cert-manager-webhook-pdns, mariadb-operator, cert-manager-istio-csr, aws-privateca-issuer, cert-manager-csi-driver...

Open Babel has out-of-bounds write in CSR PadString (title field)

SummaryA memory-safety vulnerability in Open Babel's CSR parser allowed anout-of-bounds write when reading a crafted input file. DetailsThe flaw was in the PadString helper used to handle the CSR titlefield. A title longer than the fixed destination buffer caused theparser to write past the end o...

PYSEC-2026-2788 Open Babel has out-of-bounds write in CSR PadString (title field)

Summary A memory-safety vulnerability in Open Babel's CSR parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the PadString helper used to handle the CSR title field. A title longer than the fixed destination buffer caused the parser to write past the...

PYSEC-2026-3214 Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

Impact The implementation of tf.rawops.SparseTensorToCSRSparseMatrix does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf indices = tf.constant53, shape=3, dtype=tf.int64 values =...

PYSEC-2026-1018 Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

Impact The implementation of tf.rawops.SparseTensorToCSRSparseMatrix does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf indices = tf.constant53, shape=3, dtype=tf.int64 values =...

SUSE CVE-2022-41793

An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...