CVE-2026-84570: Protection Mechanism Failure

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypass Gatekeeper checks...

CVE-2026-65399: Authentication Bypass by Spoofing

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper...

CVE-2026-65383: Improper Access Control

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks...

CVE-2026-65369: Protection Mechanism Failure

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may bypass Gatekeeper checks...

gatekeeper v3.23.1

Gatekeeper How is Gatekeeper different from OPA? Compared to using OPA with its sidecar kube-mgmt aka Gatekeeper v1.0, Gatekeeper introduces the following functionality: An extensible, parameterized policy library Native Kubernetes CRDs for instantiating the policy library aka "constraints" Nativ...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, argocd-image-updater, external-secrets-operator, cilium, kube-metrics-adapter, fluent-operator, rke2-cloud-provider, cert-manager, keda, kubeflow-pipelines, azure-service-operator, cass-operator, flux-kustomize-controller, node-feature-discovery, deschedule...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: tigera-operator, trivy, chartmuseum, crossplane-fips, helm-push, trivy-fips, helm-operator-fips, kubescape, linkerd2, manifest-tool, cluster-api-helm-controller-fips, xeol, k9s-fips, rancher-helm, envoy-gateway, headlamp-fips, zarf-fips, gogatekeeper,...

GO-2026-5885 vulnerabilities

Vulnerabilities for packages: tigera-operator, trivy, chartmuseum, crossplane-fips, helm-push, trivy-fips, helm-operator-fips, kubescape, linkerd2, manifest-tool, cluster-api-helm-controller-fips, xeol, k9s-fips, rancher-helm, envoy-gateway, headlamp-fips, zarf-fips, gogatekeeper,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: tigera-operator, trivy, chartmuseum, grafana-operator-fips, crossplane-fips, trivy-fips, helm-fips, flux-helm-controller-fips, helm-operator-fips, linkerd2, cluster-api-helm-controller-fips, opa, xeol, k9s-fips, rancher-helm, headlamp-fips, zarf-fips, gogatekeeper,...

GO-2026-4970 vulnerabilities

Vulnerabilities for packages: eks-distro, kubernetes-csi-node-driver-registrar, docker, buildah, prometheus-fips, gitlab-workhorse-ce-fips, grafana-operator-fips, dask-gateway, langfuse-fips, karpenter-fips, commercial-grafana, grafana, gitlab-rails-ce-fips, cerbos-fips, calico-fips, prometheus,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: trivy, chartmuseum, helm-push, trivy-fips, gitlab-rails-ce-fips, apm-server-fips, helm-fips, helm-operator-fips, kubescape, manifest-tool, beats, cluster-api-helm-controller-fips, opa, melange, xeol, k9s-fips, rancher-helm, envoy-gateway, headlamp-fips, gogatekeeper,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: trivy, chartmuseum, helm-push, trivy-fips, gitlab-rails-ce-fips, apm-server-fips, helm-fips, helm-operator-fips, kubescape, manifest-tool, beats, cluster-api-helm-controller-fips, opa, melange, xeol, k9s-fips, rancher-helm, envoy-gateway, headlamp-fips, gogatekeeper,...

GO-2026-5622 vulnerabilities

Vulnerabilities for packages: kubescape-operator, tw, chartmuseum, buildkitd, helm-mapkubeapis, kaniko, rancher-helm, spegel, syft, zarf, skaffold, datadog-agent, steampipe, neuvector-scanner, docker, kargo, trivy-operator, newrelic-infrastructure-agent, eksctl, docker-cli-buildx, zot, trivy,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, chartmuseum, conftest, gogatekeeper, helm-mapkubeapis, opa, ratify, rancher-helm, zarf, steampipe, kyverno, argo-cd, trivy-operator, kyverno-notation-aws, zot, trivy, opentofu, rancher-fleet, rancher, cilium-cli, consul-k8s, helm-operator, helm,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k3d, nats-top, conftest, gogatekeeper, policy-controller, ytt, git-lfs, minio-operator, mc, flannel, rancher-helm, kubernetes-dns-node-cache, wuzz, ipfs-cluster, kubeflow-pipelines, doppler-kubernetes-operator, gobuster, kubernetes-csi-external-attacher, lvm-driver,...

SUSE CVE-2026-42183

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a nil pointer dereference in server/auth/gatekeeper.go rbacAuthorization causes a panic denial of service for SSO users whose claims match a...

vulnerabilities found in Apple MacOS

Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...

CVE-2026-64708

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may bypass Gatekeeper checks...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...