kubestriker

A Blazing fast Security Auditing tool for kubernetes!! Overview & Journey of Kubestriker Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation. It performs...

trivy-operator

Kubernetes-native security toolkit. Documentation Introduction The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernete...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path...

USN-8816-4: Linux kernel (GKE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

USN-8660-1 linux-gcp, linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, k3d, kubeflow, hey, dynamic-localpv-provisioner, kube-state-metrics, kubeflow-fips, kubeflow-katib, wireguard-go, restic, terraform-provider-sendgrid, gke-gcloud-auth-plugin, terraform-provider-sendgrid-fips, go, grpcurl...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, k3d, kubeflow, wireguard-go, grpcurl, go, hey, kubeflow-katib, restic, terraform-provider-sendgrid, gke-gcloud-auth-plugin...

Malicious code in gke-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d8166ccce1b949aaac0d7138ed8faf7494ac88239e6ff2f00cfdb1d1be4011 The package gke-net was found to contain malicious code...

MAL-2026-2766 Malicious code in gke-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d8166ccce1b949aaac0d7138ed8faf7494ac88239e6ff2f00cfdb1d1be4011 The package gke-net was found to contain malicious code...

CVE-2026-4810: Missing Authentication for Critical Function

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit ADK versions 1.7.0 and 2.0.0a1 through 1.28.1 and 2.0.0a2 on Python OSS, Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This...

Ubuntu: Security Advisory (USN-8059-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-8013-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7928-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7889-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7793-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7725-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7704-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7609-1 linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Netfilter; - Network traffic control; CVE-2025-38001, CVE-2025-37798, CVE-2025-37932,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, chartmuseum, influx, flannel-cni-plugin, pulumi, amass, nri-redis, vault-k8s, mockery, vexctl, thanos, nri-nagios, kubernetes-csi-external-provisioner, nri-f5, controller-gen, temporal, dask-gateway, supercronic, render-template, minio,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, chartmuseum, influx, flannel-cni-plugin, pulumi, amass, nri-redis, vault-k8s, mockery, vexctl, thanos, nri-nagios, kubernetes-csi-external-provisioner, nri-f5, controller-gen, temporal, dask-gateway, supercronic, render-template, minio,...