1851 matches found
Kasten Prometheus Export via remote_write
Purpose Kasten now supports exporting metrics from the embedded Prometheus to external backends using Prometheus's remotewrite capability. This feature supports the collection, aggregation, and visualization of cluster and multi-cluster metrics in monitoring tools like Grafana Cloud and Datadog...
📄 Headlamp 0.38.0 Unauthenticated Cached Credentials Access
Proof of concept exploit for a flaw in Headlamp Kubernetes dashboard versions 0.38.0 and below that allows unauthenticated users to access sensitive Helm release data, including secrets, tokens, and passwords, due to improper server-side caching...
openSUSE Security Advisory (SUSE-SU-2025:4437-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
📄 Headlamp 0.38.0 Credential Reuse
A security issue was discovered in the in-cluster version of Headlamp where unauthenticated users may be able to reuse cached credentials to access Helm functionality through the Headlamp UI. Kubernetes clusters are only affected if Headlamp is installed, is configured with config.enableHelm: tru...
SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2025:4437-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4437-1 advisory. This update for helm rebuilds it against current GO to fix security issues in go-stdlib. Tenable has extracted the preceding...
Credential caching in Headlamp with Helm enabled
Original tracking issue: https://github.com/kubernetes-sigs/headlamp/issues/4282 CVSS Rating: High 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Description of vulnerability A security issue was discovered in the in-cluster version of Headlamp where unauthenticated users may be able to reuse...
Security update for helm
This update for helm rebuilds it against current GO to fix security issues in go-stdlib. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE...
SUSE-SU-2025:4437-1 Security update for helm
This update for helm rebuilds it against current GO to fix security issues in go-stdlib...
PT-2025-54913
This update for helm rebuilds it against current GO to fix security issues in go-stdlib...
PT-2025-52206
Name of the Vulnerable Software and Affected Versions Headlamp versions prior to 0.39.0 Description A configuration issue with config.enableHelm: true in the Headlamp user interface for Kubernetes cluster management leads to information disclosure through caching when processing the...
SUSE-SU-2025:21221-1 Security update for helm
This update for helm fixes the following issues: Update to version 3.19.1 bsc1251649, CVE-2025-58190, bsc1251442, CVE-2025-47911: choredeps: bump github.com/containerd/containerd from 1.7.28 to 1.7.29 jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 Avoid "panic: interface...
CVE-2025-61727 vulnerabilities
Vulnerabilities for packages: kubernetes-replicator, sftpgo-plugin-kms, kubeflow, protoc-gen-go, gitness, spire-controller-manager, opa, metrics-agent, timescaledb-tune, skaffold, github-mcp-server, kserve-rest-proxy, mesosphere-vsphere-csi, seaweedfs, mkcert, snyk-cli, newrelic-nri-kube-events,...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: kubernetes-replicator, sftpgo-plugin-kms, kubeflow, protoc-gen-go, gitness, spire-controller-manager, opa, metrics-agent, timescaledb-tune, skaffold, github-mcp-server, kserve-rest-proxy, mesosphere-vsphere-csi, seaweedfs, mkcert, snyk-cli, newrelic-nri-kube-events,...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: newrelic-nri-kube-events-fips, kubernetes-csi-driver-nfs-fips, terraform-provider-google, sftpgo-plugin-eventstore, go-fips, kafka-proxy-fips, consul, kustomize-fips, terraform-provider-azuread, gatekeeper-fips, prometheus-adapter-fips, opa-fips-envoy,...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: fuse-overlayfs-snapshotter, sftpgo-plugin-kms, flannel-cni-plugin, temporal-ui-server, neuvector-sigstore-interface, kine, nri-memcached, github-mcp-server, snyk-cli, kubernetes-csi-driver-hostpath, nginx-prometheus-exporter, rancher-loglevel, tofu-controller,...
BIT-FLUX-2022-36049 Flux2 Helm Controller denial of service
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...
BIT-FLUX-2022-24817 Improper kubeconfig validation allows arbitrary code execution
Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.20.6 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
