104 matches found
aws-iam-authenticator
AWS IAM Authenticator for Kubernetes A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project receives contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS...
copy-fail-blocker
copy-fail-blocker CVE-2026-31431"Copy Fail" 및 Dirty Frag의 RxRPC 변종에 대한 BPF-LSM 완화 조치이며, AFALG 또는 AFRXRPC 소켓 패밀리를 통해 접근 가능한 커널 측 인플레이스 암호화 경로에 대한 사용자 공간 접근에 의존하는 유사한 권한 상승 취약점에도 적용됩니다. 모든 노드의 socketcreate 후크에 단일 BPF-LSM 프로그램을 연결하는 소규모 DaemonSet입니다. 이 프로그램은 프로세스 권한, 네임스페이스 또는 seccomp 프로필과 관계없이 모든 사...
CVE-2024-3094
CVE-2024-3094 K8s 클러스터 내부에서 CVE-2024-3094 취약점을 테스트하기 위한 기본 POC ❗ 면책 조항 ❗ 교육 목적으로만 사용하십시오. 저자는 이 소프트웨어 사용으로 인한 어떠한 손해에도 책임을 지지 않습니다. 설명 취약한 포드를 배포하고 그 취약점을 악용하여 포드 내부에서 명령을 실행해 보겠습니다. 보안상의 이유로 동일한 네트워크 내에서 수행하며, 취약한 포드를 인터넷에 노출하지는 않지만 개념은 동일합니다. 이 취약점을 이용하면 포드가 보안 컨텍스트로 실행 중이더라도 포드 내부에서 명령을 실행할 수...
CVE-2026-54522 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-4MRV-5P47-P938 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-4MRV-5P47-P938 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...
CVE-2026-54522 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-MHC6-2GFQ-XX62 Rancher vulnerable to command injection through unsanitized YAML parameter
Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters. This endpoint accepts an authImage query parameter that is rendered without sanitization into a generated...
Rancher vulnerable to command injection through unsanitized YAML parameter
Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters. This endpoint accepts an authImage query parameter that is rendered without sanitization into a generated...
PT-2026-55141
Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint /v3/import/token clusterId.yaml through unsanitized YAML parameters. This endpoint accepts an authImage query parameter that is rendered without sanitization into a generated...
CVE-2026-44024 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
CVE-2026-44161 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-72F5-RR8C-R6GR vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-PR7J-96CJ-549H vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
CVE-2026-44025 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-44HJ-4M45-FRJ3 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-J9CW-HWQF-85W7 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
CVE-2026-44160 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
CVE-2026-44025 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset...
GHSA-44HJ-4M45-FRJ3 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset...