23 matches found
kube-bench
kube-bench ๆฏไธไธชๅทฅๅ ท๏ผ็จไบๆฃๆฅ Kubernetes ๆฏๅฆๆ็ ง CIS Kubernetes ๅบๅ ไธญ่ฎฐๅฝ็ๆฃๆฅ้กนๅฎๅ จ้จ็ฝฒใ ๆต่ฏไฝฟ็จ YAML ๆไปถ่ฟ่ก้ ็ฝฎ๏ผไฝฟๅพ่ฏฅๅทฅๅ ทๅจๆต่ฏ่ง่ๆผๅๆถๆไบๆดๆฐใ ไฝไธบ Trivy ๅ Trivy Operator ไธ้จๅ็ CIS ๆซๆ Trivy๏ผไธๆฌพๅ จๅไธไบๅ็ๅฎๅ จๆซๆๅจ๏ผๅฏไปฅไฝไธบ Kubernetes Operator ้จ็ฝฒๅจ้็พคๅ ใๆ ่ฎบๆฏ Trivy CLI ่ฟๆฏ Trivy Operator๏ผ้ฝๆฏๆ CIS Kubernetes ๅบๅๆซๆๅๅ ถไปๅค้กนๅ่ฝใ ๅฟซ้ๅผๅง ๆๅค็งๆนๅผ่ฟ่ก kube-benchใ ไฝ ๅฏไปฅๅจ Pod ๅ ่ฟ่ก...
trivy-operator
Kubernetes-native security toolkit. Documentation...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: kubecolor, kubeflow-katib, rancher-system-upgrade-controller, rancher-system-agent, rabbitmq-default-user-credential-updater, kubernetes-dashboard, kyverno-notation-aws, delve, docker-cli-buildx, gobump, cloud-provider-vsphere, terraform, cluster-api-provider-vsphere...
GO-2025-3488 vulnerabilities
Vulnerabilities for packages: fluent-bit-plugin-loki, kubernetes-dashboard, tw, crossplane-provider-azure-authorization, podman, eksctl, kaniko, chezmoi, kubescape, crossplane-provider-aws-kinesis, grafana-operator, flannel, cert-manager-istio-csr, frp, crossplane-provider-azure-managedidentity,...
CLEANSTART-2026-SY46985 Security fixes in kube-bench 0.15.0-r0
Package kube-bench version 0.15.0-r0 fixes 3 vulnerabilities: CVE-2026-35469, CVE-2026-33815, CVE-2026-33816...
CLEANSTART-2026-HC35488 Security fixes in kube-bench-fips 0.14.1-r0
Package kube-bench-fips version 0.14.1-r0 fixes 4 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...
CLEANSTART-2026-VV16787 Security fixes in kube-bench 0.15.0-r1
Package kube-bench version 0.15.0-r1 fixes 23 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506, CVE-2026-25680...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: flux-source-watcher, crossplane-provider-aws-servicediscovery, syft, dynamic-localpv-provisioner, crossplane-provider-aws-ecr-fips, crossplane-aws-provider, envoy-ratelimit-fips, secretgen-controller, knative-eventing, flannel-fips, secrets-store-csi-driver-fips,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: mage, mailpit-fips, fscrypt, pgtimetable, victoriametrics-operator, grpcurl-fips, opentelemetry-operator, timestamp-authority-fips, linkerd2-cni-plugin, flux-notification-controller, vexctl, nerdctl, grafana-beyla, spegel-fips, fluxcd-kustomize-mutating-webhook-fips,...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: cert-manager, swagger, glow, knative-serving, kyverno-notation-aws, spark-operator, tekton-pipelines, regclient, conftest, docker-cli-buildx, containerd, caddy, tekton-chains, ini-file, kubecolor, clickhouse-operator, timescaledb-tune, cg, src, harbor-registry, fzf,...
PT-2025-33645 ยท Undefined ยท Undefined
๐จ URGENT: Kubernetes admins must patch CVE-2025-02383 SUSE-2025-02383-2 โ Affects: kube-apiserver v1.26.x โ Risk: Moderate-severity RBAC bypass. โ Fix: Apply SUSE patches NOW + validate with kube-bench. Read more: ๐ https://t.co/VRCE9nkHn3 https://t.co/ukAF3LWe56...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, kube-metrics-adapter, conftest, golangci-lint, ini-file, fscrypt, sigstore-scaffolding, victoriametrics-operator, kube-fluentd-operator, crossplane-provider-azure, helm-operator-fips, timestamp-authority-fips, ipfs-cluster-fips, nerdctl,...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, crossplane-provider-azure, govulncheck, direnv, kubeflow-katib, nri-prometheus, vite, hello-world-golang, kubernetes-dashboard, oras, vt-cli, metallb, gosu, kubeflow-pipelines, delve, vexctl, minio, amass, terraform, dataplaneapi,...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, crossplane-provider-azure, govulncheck, direnv, kubeflow-katib, nri-prometheus, vite, hello-world-golang, kubernetes-dashboard, oras, vt-cli, metallb, gosu, kubeflow-pipelines, delve, vexctl, minio, amass, terraform, dataplaneapi,...
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: mage, syft, dynamic-localpv-provisioner, envoy-ratelimit-fips, istio-pilot-agent, conftest, golangci-lint, docker-compose, sigstore-scaffolding, multus-cni-fips, kube-fluentd-operator, crossplane-provider-azure, helm-operator-fips, flux-source-controller,...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, trillian, caddy, kots, k3s, trillian-fips, kine, temporal-server, src, caddy-fips, spicedb, falcosidekick-fips, kube-bench, step, kube-bench-fips, amass, argo-workflows-fips, step-ca, temporal-server-fips, argo-workflows, ferretdb...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: amass, argo-workflows, src, caddy, k3s, kots, kine, step-ca, trillian, ferretdb, spicedb, kube-bench, temporal-server, step...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, crossplane-provider-azure, cloudflared, kubeflow-katib, nri-prometheus, hugo, k9s, terraform-provider-aws, boring-registry, kyverno-policy-reporter-ui, kubernetes-dashboard, metallb, crossplane-provider-aws-elasticache,...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: amass, argo-workflows, src, caddy, k3s, kots, kine, step-ca, trillian, ferretdb, spicedb, kube-bench, temporal-server, step...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, trillian, caddy, kots, k3s, trillian-fips, kine, temporal-server, src, caddy-fips, spicedb, falcosidekick-fips, kube-bench, step, kube-bench-fips, amass, argo-workflows-fips, step-ca, temporal-server-fips, argo-workflows, ferretdb...