kube-linter

Análisis estático para Kubernetes ¿Qué es KubeLinter? KubeLinter analiza archivos YAML de Kubernetes, charts de Helm y manifiestos de Kustomize, y los verifica contra una variedad de mejores prácticas, con un enfoque en la preparación para producción y la seguridad. KubeLinter ejecuta...

stackrox

目录 StackRox Kubernetes 安全平台 目录 社区 部署 StackRox 使用 Helm 快速安装 使用 Helm 手动安装 使用 Operator 安装 通过脚本安装 Kubernetes 发行版 EKS, AKS, GKE OpenShift Docker Desktop、Colima 或 minikube 访问 StackRox 用户界面 UI 开发 快速开始 构建工具 克隆 StackRox 本地开发 常用 Makefile 目标 生产力 GoLand 配置 运行 sqlintegration 测试 调试 生成便携安装程序 运行 StackRox 的依赖和建议...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the online demo source...

CVE-2025-14269

CVE-2025-14269 Se descubrió un problema de seguridad en la versión dentro del clúster de Headlamp donde usuarios no autenticados pueden reutilizar credenciales en caché para acceder a la funcionalidad de Helm a través de la interfaz de usuario de Headlamp. Los clústeres de Kubernetes solo se ven...

vapi

vAPI vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises. Requirements PHP MySQL PostMan MITM Proxy Installation Docker docker-compose up -d Installation Manual Copying the Code cd git clone...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: k9s, consul-k8s-fips, helm-set-status, k9s-fips, ocm-cli, kyverno-notation-aws, xeol-fips, commercial-kyverno, helm-push, gitlab-operator, k8sgpt, ocm-kubernetes-controller-fips, kube-arangodb-fips, ocm-cli-fips, flux-helm-controller, cluster-api-helm-controller,...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: k9s, consul-k8s-fips, helm-set-status, k9s-fips, ocm-cli, kyverno-notation-aws, xeol-fips, commercial-kyverno, helm-push, gitlab-operator, k8sgpt, ocm-kubernetes-controller-fips, kube-arangodb-fips, ocm-cli-fips, flux-helm-controller, cluster-api-helm-controller,...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: maru, opentofu, helm-mapkubeapis, cluster-api-helm-controller, kube-arangodb, rancher-helm, manifest-tool, k8sgpt, xeol, kargo, k9s, cert-manager-cmctl, gitness, helm-push, helm-set-status, kyverno-notation-aws, tigera-operator, flux-helm-controller...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: maru, opentofu, helm-mapkubeapis, cluster-api-helm-controller, kube-arangodb, rancher-helm, manifest-tool, k8sgpt, xeol, kargo, k9s, cert-manager-cmctl, gitness, helm-push, helm-set-status, kyverno-notation-aws, tigera-operator, flux-helm-controller...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: dagger, eksctl, chartmuseum, docker, k8sgpt, nerdctl, kargo, k9s, kubescape, newrelic-infrastructure-agent, kubescape-operator, k3s, helm-set-status, falco-no-driver, skaffold, tigera-operator, trivy-operator, docker-cli-buildx, xeol, kubevela, zot, helm-mapkubeapis,...

Security update for helm

This update for helm fixes the following issues: CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction bsc1281104. CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal...

SUSE-SU-2026:4417-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction bsc1281104. - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows...

openSUSE 16: helm / helm-bash-completion / helm-fish-completion / etc (openSUSE-SU-2026:21983-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21983-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204:...

chart-down

chart-down Download and scan Helm charts for secrets using TruffleHog. Given a Helm repository URL, chart-down fetches the repo index, downloads every chart archive, extracts it, and runs TruffleHog against the contents. Requisitos Go 1.19+ TruffleHog en PATH brew install trufflehog Instalación g...

helm-plugin-path-traversal-security-assessment

CVE-2026-35204 - Escritura Arbitraria de Archivos por Path Traversal en Plugin de Helm Informe de Ciberseguridad Estilo Consultor Informe profesional de evaluación de vulnerabilidades para el riesgo de path traversal en plugins de Helm, que incluye análisis técnico, impacto, remediación y...

CVE-2025-53547-POC

CVE-2025-53547 POC 这是 CVE-2025-53547 的概念验证 Chart.lock 将测试文件链接到 /tmp/1.txt /tmp/1.txt 注入一个创建 /tmp/2.txt 的命令 在实际产品环境中，您可以更改 Chart.lock 链接文件以注入任何您想要的命令，例如： /root/.bashrc /root/.bashprofile /etc/profile ...... 或者任何可以运行 shell 脚本的文件。 然后更改 Chart.yaml 的依赖仓库 URL 参数以运行其他命令。 使用方法 helm = 3.18.3 首先运行 helm...

OPENSUSE-SU-2026:21983-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin bsc1261939....

CVE-2026-35204

CVE-2026-35204 本仓库是针对 CVE-2026-35204 的 PoC。 描述 “Helm 是 Kubernetes 的 Chart 包管理器。从 4.0.0 到 4.1.3，一个特制的 Helm 插件在被安装或更新时，会导致 Helm 将插件内容写入任意文件系统位置。为防止此问题，请验证 Helm 插件的 plugin.yaml 中不包含带有 POSIX 点-点路径分隔符（即 "/../"）的 version: 字段。此漏洞已在 4.1.4 中修复。” 此 PoC 演示了 metadata.Version 被用于构造插件归档的路径，从而允许路径遍历并将下载的...

Important: Red Hat Security Advisory: Helm CLI for Red Hat OpenShift v4.3.0 release

General availability release of Helm CLI for Red Hat OpenShift v4.3.0. Helm is the package manager for Kubernetes, used to define, install, and upgrade applications as reusable charts. This release delivers the Helm CLI for Red Hat OpenShift v4.3.0 binaries built and distributed by Red Hat...

helm-4.3.0-3.1 on GA media (moderate)

helm-4.3.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11875-1 Rating: moderate Cross-References: CVE-2026-81871 CVE-2026-81872 CVSS scores: CVE-2026-81871 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-81872 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected...