trivy-operator

Kubernetes-native security toolkit. Documentation...

kube-bench

kube-bench es una herramienta que verifica que Kubernetes esté desplegado de forma segura ejecutando las comprobaciones documentadas en el...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, nuclei, kuberlr, spire-controller-manager, clickhouse-operator, harbor-registry, rancher-system-upgrade-controller, migrate, ipfs-cluster, gptscript, steampipe, helm-operator, ko, aactl, kubernetes-dashboard-api, guac, cluster-api-azure-controller...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, rekor, grpcurl, step-issuer, descheduler, helm-operator, kubernetes-dashboard-api, skopeo, zarf, terraform-provider-pagerduty, tflint, xeol, opentofu, yunikorn-k8shim, crossplane-provider-aws-cloudwatchlogs,...

CLEANSTART-2026-SY46985 Security fixes in kube-bench 0.15.0-r0

Package kube-bench version 0.15.0-r0 fixes 3 vulnerabilities: CVE-2026-35469, CVE-2026-33815, CVE-2026-33816...

CLEANSTART-2026-VV16787 Security fixes in kube-bench 0.15.0-r1

Package kube-bench version 0.15.0-r1 fixes 23 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506, CVE-2026-25680...

CLEANSTART-2026-HC35488 Security fixes in kube-bench-fips 0.14.1-r0

Package kube-bench-fips version 0.14.1-r0 fixes 4 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, longhorn-cli-fips, promxy, chart-testing, flux-helm-controller, crossplane-provider-aws-cloudwatchlogs-fips, grafana-agent-operator, cluster-api-gcp-controller-fips, kube-logging-logging-operator, prometheus-operator-fips, kubernetes-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: promxy, grafana-agent-operator, cluster-api-gcp-controller-fips, kube-logging-operator-custom-runner, crossplane-provider-aws-efs-fips, kubeflow, amazon-k8s-cni-fips, osv-scanner, timestamp-authority, crossplane-provider-aws-efs, atlas-fips, beats, keda, paranoia,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: buildkitd, caddy, hubble, chart-testing, guac, spark-operator, eck-operator, nri-mysql, ip-masq-agent, kubeflow-katib, argo-events, azuredisk-csi, monstache, witness, cluster-api-azure-controller, apm-server, mockgen, neuvector, helm-push, kube-bench, wgcf,...

PT-2025-33645 · Undefined · Undefined

🚨 URGENT: Kubernetes admins must patch CVE-2025-02383 SUSE-2025-02383-2 ✅ Affects: kube-apiserver v1.26.x ✅ Risk: Moderate-severity RBAC bypass. ✅ Fix: Apply SUSE patches NOW + validate with kube-bench. Read more: 👉 https://t.co/VRCE9nkHn3 https://t.co/ukAF3LWe56...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, promxy, flux-helm-controller, grafana-agent-operator, kube-logging-logging-operator, seaweedfs, kube-logging-operator-custom-runner, falco-exporter, boring-registry, kubeflow, cluster-api-helm-controller-fips,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: metallb, scorecard, go-licenses, mockery, yq, go-md2man, nuclei, up, gh, petname, hey, grpcurl, grype, dynamic-localpv-provisioner, prometheus-pushgateway, vault-k8s, nri-discovery-kubernetes, helm-operator, newrelic-prometheus-configurator, protoc-gen-go-grpc, shfmt...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: metallb, scorecard, go-licenses, mockery, yq, go-md2man, nuclei, up, gh, petname, hey, grpcurl, grype, dynamic-localpv-provisioner, prometheus-pushgateway, vault-k8s, nri-discovery-kubernetes, helm-operator, newrelic-prometheus-configurator, protoc-gen-go-grpc, shfmt...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, opa-fips, flux-helm-controller, grafana-agent-operator, kube-logging-logging-operator, prometheus-operator-fips, boring-registry, external-secrets-fips, yq-fips, osv-scanner, crossplane-provider-aws, timestamp-authority,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: caddy, caddy-fips, argo-workflows-fips, falcosidekick-fips, step-ca, kube-bench, src, temporal-server, temporal-server-fips, trillian-fips, ferretdb, kube-bench-fips, amass, step, trillian, argo-workflows, wavefront-collector-for-kubernetes, k3s, kine, kots, spicedb...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: argo-workflows, step, kube-bench, src, trillian, temporal-server, k3s, ferretdb, kine, kots, caddy, step-ca, amass, spicedb...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: trust-manager, metallb, scorecard, melange, nuclei, up, gh, crossplane-provider-aws-cloudformation, rekor, grpcurl, grype, dynamic-localpv-provisioner, prometheus-pushgateway, vault-k8s, nri-discovery-kubernetes, helm-operator, ollama, protoc-gen-go-grpc, bank-vaults...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: argo-workflows, step, kube-bench, src, trillian, temporal-server, k3s, ferretdb, kine, kots, caddy, step-ca, amass, spicedb...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: caddy, caddy-fips, argo-workflows-fips, falcosidekick-fips, step-ca, kube-bench, src, temporal-server, temporal-server-fips, trillian-fips, ferretdb, kube-bench-fips, amass, step, trillian, argo-workflows, wavefront-collector-for-kubernetes, k3s, kine, kots, spicedb...