912 matches found
GHSA-FRRJ-87JH-2772 vulnerabilities
Vulnerabilities for packages: kube-vip-fips, kube-vip, cilium-cli...
Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...
CLEANSTART-2026-OQ87011 Security fixes for CVE-2026-42504 applied in versions: 2.16.0-r7
Security vulnerability affects the kube-state-metrics package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-CT15102 Security fixes for CVE-2026-42504 applied in versions: 2.17.0-r3
Security vulnerability affects the kube-state-metrics package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-SX80620 Security fixes for CVE-2026-42504 applied in versions: 2.18.0-r5
Security vulnerability affects the kube-state-metrics package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-15063
A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes unproxied orchestrator and detector metrics ports. This allows any pod on the cluster network to directly access these ports, bypassing th...
CVE-2026-15063
The CVE-2026-15063 affects the gorch service in the trustyai-service-operator. The issue is that, even with authentication enabled, gorch exposes unproxied orchestrator and detector metrics ports, reachable from any pod on the cluster network. This bypasses kube-rbac-proxy authentication, enablin...
CVE-2026-15063
A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes unproxied orchestrator and detector metrics ports. This allows any pod on the cluster network to directly access these ports, bypassing th...
CVE-2026-15063 Trustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabled
A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes unproxied orchestrator and detector metrics ports. This allows any pod on the cluster network to directly access these ports, bypassing th...
CVE-2026-15063
A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes unproxied orchestrator and detector metrics ports. This allows any pod on the cluster network to directly access these ports, bypassing th...
GHSA-XV9W-7V6Q-HPJH vulnerabilities
Vulnerabilities for packages: kube-logging-operator...
CVE-2026-44162 vulnerabilities
Vulnerabilities for packages: kube-logging-operator...
GHSA-XV9W-7V6Q-HPJH vulnerabilities
Vulnerabilities for packages: kube-logging-operator...
CVE-2026-44162 vulnerabilities
Vulnerabilities for packages: kube-logging-operator...
CVE-2026-48978 vulnerabilities
Vulnerabilities for packages: rancher-fleet, manifest-tool, trivy-operator-fips, kots, argo-cd-fips, consul-k8s-fips, rancher-agent, helm-set-status, gatekeeper, chartmuseum, helm-exporter-fips, kubescape-server-fips, gitlab-operator-fips, tigera-operator-fips, kube-arangodb-fips, k8ssandra-clien...
GHSA-XF85-363P-868W vulnerabilities
Vulnerabilities for packages: rancher-fleet, manifest-tool, trivy-operator-fips, kots, argo-cd-fips, consul-k8s-fips, rancher-agent, helm-set-status, gatekeeper, chartmuseum, helm-exporter-fips, kubescape-server-fips, gitlab-operator-fips, tigera-operator-fips, kube-arangodb-fips, k8ssandra-clien...
Malicious code in @marketfront/header (npm)
The @marketfront/header package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.27 security and extras update
Red Hat OpenShift Container Platform release 4.20.27 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...