CVE-2023-33869-RCE-PoC

Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...

CVE-2026-49975-HTTP-2-Bomb

A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...

GO-2026-6859 vulnerabilities

Vulnerabilities for packages: cert-manager, crossplane-provider-azure-storagecache, crossplane-provider-aws-route53recoveryreadiness-fips, starboard-exporter, crossplane-provider-azure-synapse, cilium-fips, envconsul-fips, azure-container-networking, dns-controller-manager-fips,...

CVE-2026-97054 vulnerabilities

Vulnerabilities for packages: cert-manager, crossplane-provider-azure-storagecache, crossplane-provider-aws-route53recoveryreadiness-fips, starboard-exporter, crossplane-provider-azure-synapse, cilium-fips, envconsul-fips, azure-container-networking, dns-controller-manager-fips,...

GHSA-RG98-F588-44XG vulnerabilities

Vulnerabilities for packages: cert-manager, crossplane-provider-azure-storagecache, crossplane-provider-aws-route53recoveryreadiness-fips, starboard-exporter, crossplane-provider-azure-synapse, cilium-fips, envconsul-fips, azure-container-networking, dns-controller-manager-fips,...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...

GHSA-C9GR-GMG4-2VQV vulnerabilities

Vulnerabilities for packages: bento, envoy, firefox, kubeflow-pipelines, cilium, loki, rclone, clickhouse, datawire-envoy, brotli, grafana-pyroscope, keycloak, jaeger, bun, gftools, kubeflow-katib, brunsli, kube-metrics-adapter, zipkin, mattermost, dotnet-sdk, superset, traefik, dapr, grype,...

GO-2026-6888 vulnerabilities

Vulnerabilities for packages: bento, envoy, firefox, kubeflow-pipelines, cilium, loki, rclone, clickhouse, datawire-envoy, brotli, grafana-pyroscope, keycloak, jaeger, bun, gftools, kubeflow-katib, brunsli, kube-metrics-adapter, zipkin, mattermost, dotnet-sdk, superset, traefik, dapr, grype,...

GO-2026-6865 vulnerabilities

Vulnerabilities for packages: crossplane, eksctl, kubeflow-pipelines, datadog-agent, k3s, distribution, newrelic-fluent-bit-output, timoni, neuvector-scanner, flux, wal-g, scorecard, tfsec, nri-kafka, terragrunt, percona-server-mongodb-operator, slsa-verifier, witness, kaniko, skaffold, velero,...

GO-2026-6778 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, envoy-gateway-fips, kubescape-operator, argocd-image-updater, argocd-image-updater-fips, kots, envoy-gateway...

GHSA-C9GR-GMG4-2VQV vulnerabilities

Vulnerabilities for packages: nemo-gym, py3-pytorch-cuda-13.2, kserve-lgbserver, nvidia-nsight-compute-12.8, lmcache-cuda-12.8, nvidia-nsight-compute-13.0, argo-workflows-fips, cilium-fips, tensorflow-cpu-jupyter, sentry-launchpad, kserve-pmmlserver, netbox, dotnet-sdk, perses-fips, dbgate,...

CVE-2026-116591 vulnerabilities

Vulnerabilities for packages: crossplane, eksctl, kubeflow-pipelines, datadog-agent, k3s, distribution, newrelic-fluent-bit-output, timoni, neuvector-scanner, flux, wal-g, scorecard, tfsec, nri-kafka, terragrunt, percona-server-mongodb-operator, slsa-verifier, witness, kaniko, skaffold, velero,...

GHSA-FPMH-FRQ8-7RJ8 vulnerabilities

Vulnerabilities for packages: crossplane, eksctl, kubeflow-pipelines, datadog-agent, k3s, distribution, newrelic-fluent-bit-output, timoni, neuvector-scanner, flux, wal-g, scorecard, tfsec, nri-kafka, terragrunt, percona-server-mongodb-operator, slsa-verifier, witness, kaniko, skaffold, velero,...

CLEANSTART-2026-HM36104 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-KI06386 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-CU84293 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-SS88453 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-OY08890 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-VN85659 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...