aws-iam-authenticator

AWS IAM Authenticator for Kubernetes A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project receives contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS...

copy-fail-blocker

copy-fail-blocker CVE-2026-31431（「Copy Fail」）および Dirty Frag の RxRPC 亜種、ならびに AFALG または AFRXRPC ソケットファミリ経由で到達可能なカーネル側インプレース暗号パスへのユーザー空間アクセスに依存する類似の権限昇格脆弱性に対する BPF-LSM 緩和策です。 小さな DaemonSet が、すべてのノードの socketcreate フックに単一の BPF-LSM プログラムをアタッチします。このプログラムは、プロセスのケーパビリティ、名前空間、seccomp プロファイルに関係なく、ユーザー空間 からの...

CVE-2024-3094

CVE-2024-3094 K8s 클러스터 내부에서 CVE-2024-3094 취약점을 테스트하기 위한 기본 POC ❗ 면책 조항 ❗ 교육 목적으로만 사용하십시오. 저자는 이 소프트웨어 사용으로 인한 어떠한 손해에도 책임을 지지 않습니다. 설명 취약한 포드를 배포하고 그 취약점을 악용하여 포드 내부에서 명령을 실행해 보겠습니다. 보안상의 이유로 동일한 네트워크 내에서 수행하며, 취약한 포드를 인터넷에 노출하지는 않지만 개념은 동일합니다. 이 취약점을 이용하면 포드가 보안 컨텍스트로 실행 중이더라도 포드 내부에서 명령을 실행할 수...

GHSA-4MRV-5P47-P938 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-54522 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-54522 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-4MRV-5P47-P938 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-MHC6-2GFQ-XX62 Rancher vulnerable to command injection through unsanitized YAML parameter

Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters. This endpoint accepts an authImage query parameter that is rendered without sanitization into a generated...

Rancher vulnerable to command injection through unsanitized YAML parameter

Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters. This endpoint accepts an authImage query parameter that is rendered without sanitization into a generated...

GHSA-44HJ-4M45-FRJ3 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2026-44160 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

GHSA-PR7J-96CJ-549H vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

GHSA-72F5-RR8C-R6GR vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2026-44025 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

GHSA-J9CW-HWQF-85W7 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2026-44024 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2026-44161 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

GHSA-44HJ-4M45-FRJ3 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator...

GHSA-PR7J-96CJ-549H vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator...

GHSA-72F5-RR8C-R6GR vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator...