199 matches found
cloudsplaining
Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...
aws-iam-authenticator
AWS IAM Authenticator for Kubernetes Una herramienta para usar credenciales de AWS IAM para autenticarse en un clúster de Kubernetes. El trabajo inicial de esta herramienta fue impulsado por Heptio. El proyecto recibe contribuciones de múltiples ingenieros de la comunidad y actualmente es manteni...
kubestriker
A Blazing fast Security Auditing tool for kubernetes!! Overview & Journey of Kubestriker Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation. It performs...
rip_raw
Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...
Dirty-Frag-Kubernetes-PoC
Dirty Frag CVE-2026-43284 — PoC de Escape de Contenedor en Kubernetes Una prueba de concepto que demuestra cómo un Pod de Kubernetes predeterminado y sin privilegios puede lograr ejecución de código a nivel de nodo en Amazon EKS explotando la vulnerabilidad de corrupción de caché de páginas del...
GO-2026-6506 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, k8sgateway, juicefs, eks-distro, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache, k8sgateway-fips...
GO-2026-6507 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, k8sgateway, juicefs, eks-distro, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache, k8sgateway-fips...
CLEANSTART-2026-ZG24378 Security fix for CVE-2025-61727 applied in: apache-nifi 2.10.0-r4, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, calico-fips 3.31.2-r1, cert-manager-cmctl-fips 2.4.0-r1, cert-manager-fips 1.18.2-r0, cert-manager-fips 1.19.1-r0, cert-manager-webhook-pdns-fips 2.2.0-r0, chartmuseum-fips 0.15.0-r4, chartmuseum-fips 0.16.3-r3, cloudnative-pg-fips 1.24.4-r0, cloudnative-pg-fips 1.25.4-r0, cloudnative-pg-fips 1.26.2-r0, cni-plugin-flannel 1.6.0-r0, cni-plugins-fips 1.8.0-r0, configmap-reload 0.15.0-r0, consul-k8s-fips 1.7.8-r0, consul-k8s-fips 1.8.6-r0, consul-k8s-fips 1.9.1-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, dex-fips 2.41.1-r4, dex-fips 2.42.1-r4, dex-fips 2.43.1-r4, docker-fips 28.4.0-r0, druid-exporter-fips 0.10-r1, druid-exporter-fips 0.11-r2, eck-operator 3.2.0-r1, eks-distro-kube-apiserver-fips 1.34.2-r0, elastic-beats-fips 9.2.2-r0, external-dns 0.18.0-r0, external-dns-fips 0.20.0-r0, external-secrets 0.20.4-r0, flux-notification-controller-fips 1.5.0-r0, go-discover-fips 0_git20250325-r0, go-fips-1.25 1.25.6-r1, gomplate-fips 4.3.3-r3, harbor-registry 3.0.0.1-r2, harbor-registry-fips 2.6.2-r0, harbor-registry-fips 2.7.1-r0, harbor-registry-fips 2.8.3-r0, harbor-registry-fips 3.0.0-r1, helm-fips 3.17-4-r0, helm-fips 3.19.0-r1, helm-fips 4.0.1-r0, helm-operator-fips 1.39.0-r1, helm-operator-fips 1.41.1-r1, ip-masq-agent 2.12.6-r1, istio-operator-fips 1.25.5-r0, istio-operator-fips 1.26.7-r0, istio-operator-fips 1.27.4-r0, istio-operator-fips 1.28.1-r0, istio-operator-fips 1.4.10-r6, istio-pilot-discovery 1.28.1-r0, istio-pilot-discovery-fips 1.25.5-r0, istio-pilot-discovery-fips 1.26.7-r0, istio-pilot-discovery-fips 1.27.4-r0, istio-pilot-discovery-fips 1.28.1-r0, k8ssandra-client-fips 0.7.0-r2, k8ssandra-client-fips 0.7.0-r4, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.26.0-r0, k8ssandra-operator-fips 1.27.0-r0, k8ssandra-operator-fips 1.28.0-r0, k8ssandra-operator-fips 1.29.0-r0, kaniko-fips 1.24.0-r0, kapp-controller 0.59.0-r1, kapp-controller-fips 0.59.0-r1, kube-rbac-proxy-fips 0.17.1-r1, kube-rbac-proxy-fips 0.18.2-r2, kube-rbac-proxy-fips 0.19.1-r1, kube-state-metrics 2.16.0-r3, kube-state-metrics-fips 2.14.0-r0, kube-state-metrics-fips 2.15.0-r0, kube-state-metrics-fips 2.17.0-r0, kubernetes 1.31.14-r1, kubernetes 1.32-10-r1, kubernetes 1.33.6-r0, kubernetes 1.34.2-r0, kubernetes-csi-external-resizer-fips 2.0.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-csi-node-driver-registrar-fips 2.15.0-r0, kubernetes-fips 1.31.14-r0, kubernetes-fips 1.32.10-r0, kubernetes-fips 1.32.2-r0, kubernetes-fips 1.33.6-r0, kured 1.20.0-r0, metallb-fips 0.14.9-r1, metrics-server 0.8.0-r0, metrics-server-fips 0.5.2-r1, metrics-server-fips 0.6.4-r1, metrics-server-fips 0.7.2-r3, metrics-server-fips 0.8.0-r5, minio-operator 7.1.1-r3, mongodb 8.2.1-r1, mongodb 8.2.6-r1, multus-cni-fips 4.0.2-r3, multus-cni-fips 4.1.4-r4, multus-cni-fips 4.2.3-r1, nginx-prometheus-exporter 1.5.1-r0, nginx-prometheus-exporter-fips 1.5.1-r0, nvidia-container-toolkit 1.19.0-r0, openbao-fips 2.4.4-r2, opensearch-k8s-operator-fips 2.5.1-r1, opensearch-k8s-operator-fips 2.6.1-r7, opensearch-k8s-operator-fips 2.7.0-r8, opentofu-fips 1.10.7-r0, opentofu-fips 1.7.10-r0, opentofu-fips 1.8.11-r0, opentofu-fips 1.9.4-r1, prometheus-fips 3.5.0-r4, prometheus-fips 3.9.0-r0, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r0, prometheus-node-exporter-fips 1.7.0-r1, prometheus-node-exporter-fips 1.8.2-r1, prometheus-node-exporter-fips 1.9.1-r0, prometheus-operator-fips 0.85.0-r1, prometheus-operator-fips 0.86.2-r0, prometheus-operator-fips 0.87.0-r0, prometheus-redis-exporter-fips 1.77.0-r0, prometheus-redis-exporter-fips 1.78.0-r0, prometheus-redis-exporter-fips 1.79.0-r0, promxy 0.0.93-r1, rabbitmq-messaging-topology-operator 1.15.0-r1, restic 0.18.0-r0, runc 1.1.14-r0, smarter-device-manager-fips 1.20.12-r0, spark-operator 2.2.1-r0, spire-server-fips 1.13.3-r0, stakater-reloader-fips 1.1.0-r3, stakater-reloader-fips 1.2.1-r1, stakater-reloader-fips 1.3.0-r0, stakater-reloader-fips 1.4.10-r0, step-issuer-fips 0.9.11-r1, step-issuer-fips 0.9.9-r2, tekton-pipelines 1.5.0-r0, tekton-pipelines-fips 1.5.0-r0, tempo 2.9.0-r0, terragrunt-fips 0.90.2-r0, terragrunt-fips 0.91.5-r0, terragrunt-fips 0.92.1-r0, terragrunt-fips 0.93.13-r1, thanos-operator-fips 0.3.7-r0, trino 479-r0, velero 1.17.0-r1, velero-fips 1.14.1-r1, velero-fips 1.16.2, vertical-pod-autoscaler 1.5.1-r0, vertical-pod-autoscaler-fips 1.5.1-r0, volume-modifier-for-k8s 0.9.0-r0, volume-modifier-for-k8s-fips 0.9.0-r0, wave-fips 0.10.0-r0, wave-fips 0.9.0-r3
CVE-2025-61727 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VX02891 Security fix for CVE-2025-61732 applied in: argo-cd-fips 3.0.22-r1, argo-cd-fips 3.1.11-r0, argo-cd-fips 3.1.12-r1, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, cass-operator 1.28.1-r0, cert-manager-fips 1.17.4-r1, certificate-transparency-trillian-ctserver 1.3.2-r1, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cloudnative-pg-fips 1.24.4-r1, cloudnative-pg-fips 1.25.4-r1, coredns 1.14.1-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, crossplane 2.0.2-r0, dcgm-exporter 4.5.1-r0, distribution 3.0.0-r1, dynamic-localpv-provisioner 4.4.0-r2, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-scheduler-fips 1.34.3-r0, envoy-ratelimit 0.0.0_git20251231-r0, external-dns 0.18.0-r0, external-secrets 0.20.4-r0, external-secrets-fips 0.17.0-r2, external-secrets-fips 0.20.4-r2, external-secrets-fips 1.2.0-r0, fluent-operator-fips 3.4.0-r7, flux-image-automation-controller-fips 4.0.1-r0, flux-notification-controller-fips 1.5.0-r0, git-lfs 3.7.0-r1, git-sync 4.5.1-r1, gitlab-pages 18.7.1-r0, gitlab-pages-fips 18.7.1-r0, go-fips-1.25 1.25.6-r1, grafana-mimir 3.0.2-r0, haproxy-ingress 0.15.1-r0, helm 3.19.5-r0, helm 4.0.1-r0, helm-fips 3.19.5-r0, helm-fips 4.0.5-r0, helm-operator-fips 1.41.1-r2, ip-masq-agent 2.12.6-r1, istio-fips 1.28.3-r0, k8ssandra-client-fips 0.5.0-r6, k8ssandra-client-fips 0.8.7-r0, k8ssandra-operator-fips 1.29.0-r1, kapp-controller-fips 0.59.0-r2, kserve 0.16.0-r0, kubernetes 1.34.1-r2, kubernetes-csi-driver-nfs-fips 4.12.1-r1, kubernetes-csi-external-attacher 4.10.0-r0, kubernetes-csi-external-attacher-fips 4.10.0-r0, kubernetes-csi-external-resizer 2.0.0-r0, kubernetes-csi-external-resizer-fips 2.0.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubernetes-dashboard-auth 1.4.0-r1, kubernetes-dashboard-auth-fips 1.4.0-r1, kubernetes-dashboard-web 1.7.0-r0, kubernetes-replicator-fips 2.12.2-r0, kubescape 3.0.47-r0, kured 1.20.0-r0, kustomize 5.7.1-r1, kustomize-fips 5.7.1-r1, kyverno-fips 1.13.6-r9, local-static-provisioner 2.8.0-r1, metallb-fips 0.15.3-r0, minio-operator 7.1.1-r3, minio-operator-fips 6.0.4-r8, minio-operator-fips 7.1.1-r8, newrelic-infrastructure-agent 1.71.4-r0, nginx-prometheus-exporter 1.5.1-r1, nginx-prometheus-exporter-fips 1.5.1-r1, node-feature-discovery 0.18.3-r2, nri-kubernetes 3.51.2-r0, nvidia-container-toolkit 1.19.0-r0, opensearch-k8s-operator-fips 2.5.1-r1, opensearch-k8s-operator-fips 2.6.1-r2, opensearch-k8s-operator-fips 2.6.1-r7, opensearch-k8s-operator-fips 2.7.0-r8, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1, prometheus-elasticsearch-exporter 1.10.0-r0, prometheus-elasticsearch-exporter-fips 1.10.0-r0, prometheus-mysqld-exporter 0.18.0-r0, prometheus-mysqld-exporter-fips 0.18.0-r0, prometheus-node-exporter 1.8.0-r3, prometheus-operator 0.87.1-r0, prometheus-operator-fips 0.88.0-r0, prometheus-operator-fips 0.88.0-r1, prometheus-redis-exporter-fips 1.77.0-r2, prometheus-redis-exporter-fips 1.78.0-r2, prometheus-redis-exporter-fips 1.79.0-r2, prometheus-redis-exporter-fips 1.80.0-r0, prometheus-redis-exporter-fips 1.80.1-r1, prometheus-statsd-exporter 0.28.0-r0, promxy 0.0.93-r1, pulumi-kubernetes-operator 1.16.0-r0, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rancher-agent 2.13.1-r0, runc 1.1.14-r0, sealed-secrets 0.33.1-r0, sealed-secrets 0.34.0-r0, sigstore-scaffolding 0.7.29-r2, sigstore-scaffolding 0.7.31-r2, smarter-device-manager-fips 1.20.12-r0, spark-operator 2.2.1-r0, spire-server 1.14.1-r2, spire-server-fips 1.14.1-r2, stakater-reloader-fips 1.2.1-r3, tekton-chains-fips 0.26.0-r3, tekton-pipelines 1.5.0-r3, tekton-pipelines-fips 1.5.0-r1, temporal-ui-server-fips 2.44.0-r0, terragrunt-fips 0.94.0-r0, terragrunt-fips 0.95.1-r0, timoni 0.25.2-r0, trino 479-r0, vault 1.21.2-r0, velero 1.17.2-r0, vertical-pod-autoscaler 1.5.1-r2, vertical-pod-autoscaler-fips 1.5.1-r1, victoriametrics-cluster 1.132.0-r0, victoriametrics-cluster-fips 1.132.0-r0, victoriametrics-operator 0.65.0-r1, victoriametrics-operator-fips 0.65.0-r1, wave-fips 0.10.0-r1, yunikorn-k8shim 1.7.0-r0, yunikorn-web-fips 1.7.0-r0, zot 2.1.13-r0
CVE-2025-61732 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-DG14029 etcd is a distributed key-value store for the data of a distributed system
Multiple security vulnerabilities affect the eks-distro-kube-apiserver package. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...
CVE-2026-86831
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod...
CVE-2026-86831 Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod...
CVE-2026-86831
AWS EKS Network Policy Agent (aws-network-policy-agent) before v1.4.0 contains an improper validation flaw in pod identifier uniqueness. An authenticated remote attacker can craft pod and namespace names that produce identifier collisions , allowing bypass of NetworkPolicy enforcement on co-locat...
CVE-2026-86831 Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod...
CVE-2026-86831 Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod...
EUVD-2026-81088
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod...
CVE-2026-86831: Improper Validation of Unsafe Equivalence in Input
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod...
GO-2026-4969 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, k8sgateway, juicefs, eks-distro, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache, k8sgateway-fips...