595 matches found
dockle
Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...
janusec
Janusec Application Gateway / JANUSEC应用网关 English Readme 提供快速、安全的应用交付 介绍PPT： https://www.janusec.com/download/Janusec-Application-Gateway-CN.pdf 主要功能 JANUSEC应用网关的主要功能有： 向Web应用提供统一的安全接入，包括HTTPS、身份认证、安全防御（WAF/CC）等。如Web应用是通过K8S Pods部署的，该网关也可以作为K8S Ingress Controller使用，向Pods提供跟普通Web应用同样的接入和安全特性。...
Elkeid
Elkeid - Bytedance Cloud Workload Protection Platform English | 简体中文 Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices. With the business...
CVE-2021-1056
CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...
GHSA-PW9P-V7R6-GX4P vulnerabilities
Vulnerabilities for packages: jupyterhub-k8s-singleuser-sample, mitmproxy...
GHSA-PCG2-G6CJ-Q92C vulnerabilities
Vulnerabilities for packages: jupyterhub-k8s-singleuser-sample, mitmproxy...
GHSA-R4J5-9XPP-3985 vulnerabilities
Vulnerabilities for packages: jupyterhub-k8s-singleuser-sample, mitmproxy...
CVE-2026-115927 vulnerabilities
Vulnerabilities for packages: jupyterhub-k8s-singleuser-sample, mitmproxy...
CVE-2026-116578 vulnerabilities
Vulnerabilities for packages: jupyterhub-k8s-singleuser-sample, mitmproxy...
CVE-2026-116577 vulnerabilities
Vulnerabilities for packages: jupyterhub-k8s-singleuser-sample, mitmproxy...
rakkess
rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...
Ingress-Nginx Controller - Remote Code Execution
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...
GHSA-VWCJ-R8V9-P53F vulnerabilities
Vulnerabilities for packages: kubernetes, wuzz, minio, kots, prometheus-operator, k3s, k6, cert-manager, containerd, nerdctl, zot, caddy, hugo-extended, hugo, fuse-overlayfs-snapshotter, kine, kyverno, flux, helm, opentelemetry-collector, step, runc, step-ca, kaf, cilium-cli, spire-server, loki,...
KubePi JwtSigKey - Admin Authentication Bypass
KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermor...
CLEANSTART-2026-PM64719 Security fix for CVE-2026-49264 applied in: k8s-sidecar 2.10.3-r2
Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-PQ13819 Security fix for CVE-2026-49265 applied in: k8s-sidecar 2.10.3-r2
Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-CZ57815 urllib3 is an HTTP client library for Python
Security vulnerability affects the k8s-sidecar package. urllib3 is an HTTP client library for Python...
CLEANSTART-2026-DB54467 urllib3 is an HTTP client library for Python
Security vulnerability affects the k8s-sidecar package. urllib3 is an HTTP client library for Python...
