CVE-2023-5044

CVE-2023-5044 Poc for CVE 2023 5044 Prerequisites Kind: v0.20.0 Kubectl: v1.29.3 Docker: v26.0.0 PoC Give Docker the correct privileges sudo usermod -aG docker $USER && newgrp docker Start the cluster with extraPortMaping and node-labels to prepare it for an ingress. cat EOF | kind create cluster...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, gitness, k3s, terraform-provider-time, kubernetes-dashboard, git-sync, opensearch-k8s-operator, calico, aws-privateca-issuer, runc, octo-sts, crossplane-provider-aws-ec2, ip-masq-agent, local-path-provisioner, minio-operator, rancher-machine,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, kube-rbac-proxy, rancher-machine, xeol, wire-go, logstash-exporter, nats, go-md2man, nfpm, rancher-telemetry, timescaledb-tune, openbao-k8s, tofu-controller, kubescape-operator, k6, cluster-api-gcp-controller, prometheus-adapter,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, terraform-provider-time, cloud-sql-proxy, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, opensearch-k8s-operator, hello-world-golang, terraform-provider-kubernetes, runc, docker-cli-buildx, octo-sts, local-path-provisioner, ip-masq-agent,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, grpcurl, nvidia-nsight-compute-12.9, prometheus-postgres-exporter-fips, licenseclassifier, stakater-reloader-fips, go-bindata, knative-eventing-fips, rancher-helm, kube-logging-operator-custom-runner, go-md2man, external-dns,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, grpcurl, nvidia-nsight-compute-12.9, prometheus-postgres-exporter-fips, licenseclassifier, stakater-reloader-fips, go-bindata, knative-eventing-fips, rancher-helm, kube-logging-operator-custom-runner, go-md2man, external-dns,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, grpcurl, nvidia-nsight-compute-12.9, prometheus-postgres-exporter-fips, licenseclassifier, stakater-reloader-fips, go-bindata, knative-eventing-fips, rancher-helm, kube-logging-operator-custom-runner, go-md2man, external-dns,...