CLEANSTART-2026-VV16787 Security fixes in kube-bench 0.15.0-r1

Package kube-bench version 0.15.0-r1 fixes 23 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506, CVE-2026-25680...

CLEANSTART-2026-HC35488 Security fixes in kube-bench-fips 0.14.1-r0

Package kube-bench-fips version 0.14.1-r0 fixes 4 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: node-problem-detector, aws-iam-authenticator-fips, istio, kubernetes-csi-external-health-monitor, mc-fips, vault-secrets-operator, victoriametrics-operator, helm-mapkubeapis, syncthing-fips, crossplane-provider-aws-memorydb-fips, cert-manager-cmctl-fips, milvus,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: chaos-mesh-fips, mesosphere-vsphere-csi, nri-memcached, victorialogs, k9s-fips, kor, cloud-provider-aws-fips, cri-tools, dragonfly-operator-fips, stern, cerbos, kubernetes-dashboard-auth-fips, temporal-ui-server-fips, migrate,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: node-problem-detector, dapr, rancher, knative-serving, harbor-cli, kubernetes-csi-external-health-monitor, cert-manager, kubeflow-katib, prometheus-operator, envconsul, nri-memcached, buildkitd, kubernetes-csi-driver-nfs, render-template, helm-operator, guac,...

PT-2025-33645 · Undefined · Undefined

🚨 URGENT: Kubernetes admins must patch CVE-2025-02383 SUSE-2025-02383-2 ✅ Affects: kube-apiserver v1.26.x ✅ Risk: Moderate-severity RBAC bypass. ✅ Fix: Apply SUSE patches NOW + validate with kube-bench. Read more: 👉 https://t.co/VRCE9nkHn3 https://t.co/ukAF3LWe56...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-iam-authenticator-fips, vault-secrets-operator, victoriametrics-operator, helm-mapkubeapis, cert-manager-cmctl-fips, crossplane-provider-sql, external-dns, nri-memcached, buildkitd, render-template, pulumi-language-java, k9s-fips, dbmate, cilium-envoy, metallb,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, kubernetes-dns-node-cache, helm-operator, dagger, flux-image-reflector-controller, aws-flb-kinesis, k8sgpt-operator, protoc-gen-go-grpc, golangci-lint, nri-mongodb, envoy-ratelimit, metallb, helm, runc, tailscale, cass-operator, nri-kafka,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, kubernetes-dns-node-cache, helm-operator, dagger, flux-image-reflector-controller, aws-flb-kinesis, k8sgpt-operator, protoc-gen-go-grpc, golangci-lint, nri-mongodb, envoy-ratelimit, metallb, helm, runc, tailscale, cass-operator, nri-kafka,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: node-problem-detector, mc-fips, nri-memcached, age, buildkitd, render-template, boring-registry-fips, pulumi-language-java, nsc, opa-fips, metallb, policy-controller, cri-tools, velero, aws-flb-firehose-fips, kubecolor, prometheus-pushgateway-fips, grafana-operator,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: argo-workflows, amass, argo-workflows-fips, k3s, wavefront-collector-for-kubernetes, spicedb, kube-bench, ferretdb, trillian, temporal-server, src, caddy, step-ca, temporal-server-fips, kube-bench-fips, step, falcosidekick-fips, caddy-fips, kots, kine, trillian-fips...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: spicedb, kots, caddy, kine, step, argo-workflows, kube-bench, amass, temporal-server, ferretdb, k3s, src, step-ca, trillian...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, kubernetes-dns-node-cache, helm-operator, dagger, flux-image-reflector-controller, aws-flb-kinesis, k8sgpt-operator, protoc-gen-go-grpc, weaviate, crossplane-provider-aws-ec2, kubernetes, golangci-lint, zarf, envoy-ratelimit, cilium-cli,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: spicedb, kots, caddy, kine, step, argo-workflows, kube-bench, amass, temporal-server, ferretdb, k3s, src, step-ca, trillian...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: argo-workflows, amass, argo-workflows-fips, k3s, wavefront-collector-for-kubernetes, spicedb, kube-bench, ferretdb, trillian, temporal-server, src, caddy, step-ca, temporal-server-fips, kube-bench-fips, step, falcosidekick-fips, caddy-fips, kots, kine, trillian-fips...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: argo-workflows, amass, argo-workflows-fips, k3s, wavefront-collector-for-kubernetes, spicedb, kube-bench, ferretdb, trillian, temporal-server, src, caddy, step-ca, temporal-server-fips, kube-bench-fips, step, falcosidekick-fips, caddy-fips, kots, kine, trillian-fips...

Critical Photon OS Security Update - PHSA-2023-3.0-0606

Updates of 'linux-aws', 'kube-bench', 'nginx-ingress', 'linux', 'nodejs', 'linux-secure', 'linux-esx', 'linux-rt', 'nxtgn-openssl', 'ntp' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-4.0-0417

Updates of 'libarchive', 'ntp', 'bindutils', 'protobuf', 'binutils', 'binutils-aarch64-linux-gnu', 'docker-compose', 'samba-client', 'kube-bench', 'nodejs', 'libtiff', 'libXi' packages of Photon OS have been released...

Kube-Bench - Checks Whether Kubernetes Is Deployed According To Security Best Practices As Defined In The CIS Kubernetes Benchmark

kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark. Tests are configured with YAML files, making this tool easy to update as test specifications evolve. Please Note 1. kube-bench implements the CIS...