kube-bench

kube-bench è uno strumento che verifica se Kubernetes è distribuito in modo sicuro eseguendo i controlli documentati nel...

kube-bench

kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, wire-go, kubernetes-csi-driver-nfs, gobuster, eksctl, helm-push, portieris, kor, aws-privateca-issuer, nri-f5, lazydocker, libnvidia-container, dive, helm-operator, conftest, migrate, azure-service-operator, envconsul, k3s, cluster-api-azure-controller,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: nri-prometheus, crossplane-provider-aws-iam, fulcio, bank-vaults, flux-image-automation-controller, crossplane, argo-workflows, kubeflow-pipelines, cluster-api-aws-controller, terraform-provider-pagerduty, crossplane-provider-aws-cloudfront, dex, k3d, fluent-operator...

CLEANSTART-2026-HC35488 Security fixes in kube-bench-fips 0.14.1-r0

Package kube-bench-fips version 0.14.1-r0 fixes 4 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CLEANSTART-2026-VV16787 Security fixes in kube-bench 0.15.0-r1

Package kube-bench version 0.15.0-r1 fixes 23 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506, CVE-2026-25680...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: node-problem-detector-fips, openbao-k8s, prometheus-blackbox-exporter-fips, pguser, etcd-fips, longhorn-share-manager, nri-apache-fips, kargo, snyk-cli, vale, jitsucom-bulker, cue-fips, kube-logging-operator-custom-runner-fips, docker-machine-driver-linode,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: longhorn-share-manager, snyk-cli, scorecard, haproxy-ingress, rabbitmq-messaging-topology-operator, zot, spire-controller-manager, envconsul, kind, lvm-driver, hugo, wazero, external-secrets-operator, crossplane-provider-keycloak-fips, aws-privateca-issuer-fips,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: dapr, glow, kubernetes-dashboard-web, docker-cli, cerbos, kyverno-notation-aws, nri-consul, nri-mysql, rancher-agent, witness, blob-csi, apm-server, grafana-alloy, rabbitmq-messaging-topology-operator, hubble, oauth2-proxy, cluster-api, vault, emissary, consul-k8s,...

PT-2025-33645 · Undefined · Undefined

🚨 URGENT: Kubernetes admins must patch CVE-2025-02383 SUSE-2025-02383-2 ✅ Affects: kube-apiserver v1.26.x ✅ Risk: Moderate-severity RBAC bypass. ✅ Fix: Apply SUSE patches NOW + validate with kube-bench. Read more: 👉 https://t.co/VRCE9nkHn3 https://t.co/ukAF3LWe56...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: containerd-fips, openbao-k8s, glow, pguser, k6-fips, snyk-cli, jitsucom-bulker, terraform-provider-kubernetes, kube-metrics-adapter-fips, cilium-envoy-fips, kubelet-csr-approver-fips, rabbitmq-messaging-topology-operator, spire-server, hubble,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-prometheus, src-fingerprint, govulncheck, wire-go, kubevela, wazero, gobuster, kubewatch, eksctl, gomplate, helm-push, aws-flb-kinesis, helm, nats, kor, kustomize, nri-f5, litefs, terraform-docs, dockerize, kubernetes-dashboard-metrics-scraper, supercronic, dive,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-prometheus, src-fingerprint, govulncheck, wire-go, kubevela, wazero, gobuster, kubewatch, eksctl, gomplate, helm-push, aws-flb-kinesis, helm, nats, kor, kustomize, nri-f5, litefs, terraform-docs, dockerize, kubernetes-dashboard-metrics-scraper, supercronic, dive,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: etcd-fips, snyk-cli, kargo, jitsucom-bulker, cue-fips, scorecard, dex-k8s-authenticator, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, kube-bench, docker-credential-gcr, nodetaint, thanos-operator-fips, stakater-reloader, go-licenses,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kine, trillian, caddy, wavefront-collector-for-kubernetes, amass, temporal-server-fips, src, temporal-server, kube-bench, ferretdb, falcosidekick-fips, step-ca, kube-bench-fips, k3s, trillian-fips, kots, spicedb, step, argo-workflows, argo-workflows-fips, caddy-fips...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: caddy, temporal-server, step-ca, argo-workflows, trillian, src, k3s, amass, kots, step, spicedb, kine, kube-bench, ferretdb...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: nri-prometheus, pgpool2exporter, oauth2-proxy, kubevela, kubewatch, step-ca, crossplane-provider-aws-iam, crossplane-provider-azure-managedidentity, eksctl, gomplate, helm-push, pulumi-language-dotnet, aws-flb-kinesis, helm, nats, kor, kustomize, litefs,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: caddy, temporal-server, step-ca, argo-workflows, trillian, src, k3s, amass, kots, step, spicedb, kine, kube-bench, ferretdb...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kine, trillian, caddy, wavefront-collector-for-kubernetes, amass, temporal-server-fips, src, temporal-server, kube-bench, ferretdb, falcosidekick-fips, step-ca, kube-bench-fips, k3s, trillian-fips, kots, spicedb, step, argo-workflows, argo-workflows-fips, caddy-fips...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: kine, trillian, caddy, wavefront-collector-for-kubernetes, amass, temporal-server-fips, src, temporal-server, kube-bench, ferretdb, falcosidekick-fips, step-ca, kube-bench-fips, k3s, trillian-fips, kots, spicedb, step, argo-workflows, argo-workflows-fips, caddy-fips...