287 matches found
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: azureml-inference-server-http, openstack-horizon-2026.1, openstack-kolla-toolbox-2025.1, in-toto, airflow, openstack-tempest-2025.2, ansible-operator, openstack-placement-2026.1, openstack-horizon-2025.1, openstack-placement-2025.2, crossplane-function-pythonic,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, dask-kubernetes, ggshield, kserve, in-toto, airflow, semgrep...
Ingress-Nginx Controller - Remote Code Execution
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...
CLEANSTART-2026-QM93035 Security fixes in opensearch-k8s-operator-fips 2.6.1-r1
Package opensearch-k8s-operator-fips version 2.6.1-r1 fixes 20 vulnerabilities: CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186...
CLEANSTART-2026-IF40239 Security fixes in jupyterhub-k8s-hub 4.3.2-r0
Package jupyterhub-k8s-hub version 4.3.2-r0 fixes 11 vulnerabilities: CVE-2026-32597, CVE-2026-30922, CVE-2026-31958, ghsa-jr27-m4p2-rc6r, ghsa-qjxf-f2mg-c6mc...
CLEANSTART-2026-EH27916 Security fixes in opensearch-k8s-operator-fips 2.8.0-r3
Package opensearch-k8s-operator-fips version 2.8.0-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32289, CVE-2026-32282, CVE-2026-27140, CVE-2026-32288...
CLEANSTART-2026-BJ58464 Security fixes in consul-k8s-fips 1.9.1-r0
Package consul-k8s-fips version 1.9.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
KubePi JwtSigKey - Admin Authentication Bypass
KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermor...
CLEANSTART-2026-AF67526 Security fixes for CVE-2026-42304, CVE-2026-44307, CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-2h4p-vjrc-8xpq, ghsa-grgv-6hw6-v9g4 applied in versions: 4.3.5-r0, 4.3.5-r1
Multiple security vulnerabilities affect the jupyterhub-k8s-hub package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UC45646 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.6.0-r0, 2.6.0-r1
Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-fips, crossplane-provider-aws-memorydb, neuvector, cilium-envoy-fips, crossplane-provider-aws-qldb-fips, skaffold-fips, crossplane-provider-aws-chime-fips, kubernetes-ingress-defaultbackend-fips, metacontroller, envconsul-fips,...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: neuvector-dbgen, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, grafana-agent-operator, pulumi-kubernetes-operator, victoriametrics-cluster, terraform-provider-azurerm, mountpoint-s3-csi-driver, prometheus-alertmanager, terraform-provider-azuread,...
GHSA-VH4V-2XQ2-G5CG vulnerabilities
Vulnerabilities for packages: trivy-fips, ocm-cli, argo-cd, falcoctl, xeol-fips, cloudbeat-fips, jfrog-cli, trivy-operator-fips, falcoctl-fips, rancher, cluster-api-helm-controller-fips, gitness, headlamp, cert-manager-cmctl, chaos-mesh-fips, helm-operator-fips, ratify, tw, consul-k8s-fips, kots,...
CVE-2026-50162 vulnerabilities
Vulnerabilities for packages: trivy-fips, ocm-cli, argo-cd, falcoctl, xeol-fips, cloudbeat-fips, jfrog-cli, trivy-operator-fips, falcoctl-fips, rancher, cluster-api-helm-controller-fips, gitness, headlamp, cert-manager-cmctl, chaos-mesh-fips, helm-operator-fips, ratify, tw, consul-k8s-fips, kots,...
GHSA-8XWF-RJM4-XVHV vulnerabilities
Vulnerabilities for packages: trivy-fips, ocm-cli, argo-cd, falcoctl, xeol-fips, cloudbeat-fips, jfrog-cli, trivy-operator-fips, falcoctl-fips, rancher, cluster-api-helm-controller-fips, gitness, headlamp, cert-manager-cmctl, chaos-mesh-fips, helm-operator-fips, ratify, tw, consul-k8s-fips, kots,...
GHSA-XF85-363P-868W vulnerabilities
Vulnerabilities for packages: trivy-fips, ocm-cli, argo-cd, falcoctl, xeol-fips, cloudbeat-fips, jfrog-cli, trivy-operator-fips, falcoctl-fips, rancher, cluster-api-helm-controller-fips, gitness, headlamp, cert-manager-cmctl, chaos-mesh-fips, helm-operator-fips, ratify, tw, consul-k8s-fips, kots,...
GHSA-JXPM-75MH-9FP7 vulnerabilities
Vulnerabilities for packages: trivy-fips, ocm-cli, argo-cd, falcoctl, xeol-fips, cloudbeat-fips, jfrog-cli, trivy-operator-fips, falcoctl-fips, rancher, cluster-api-helm-controller-fips, gitness, headlamp, cert-manager-cmctl, chaos-mesh-fips, helm-operator-fips, ratify, tw, consul-k8s-fips, kots,...
CVE-2026-50151 vulnerabilities
Vulnerabilities for packages: trivy-fips, ocm-cli, argo-cd, falcoctl, xeol-fips, cloudbeat-fips, jfrog-cli, trivy-operator-fips, falcoctl-fips, rancher, cluster-api-helm-controller-fips, gitness, headlamp, cert-manager-cmctl, chaos-mesh-fips, helm-operator-fips, ratify, tw, consul-k8s-fips, kots,...
GHSA-XJVP-4FHW-GC47 vulnerabilities
Vulnerabilities for packages: podman, cadvisor, sriov-network-device-plugin-fips, gpu-operator-fips, sriov-network-device-plugin, buildah, gpu-operator, prometheus-podman-exporter, rancher-agent, nvidia-container-toolkit, k8s-device-plugin-fips, rancher, podman-fips, nvidia-container-toolkit-fips...