kube-reaper

kube-reaper Инструмент для картирования путей атак через RBAC в Kubernetes. Он определяет, что может делать ваша учётная запись, отмечает опасные разрешения и выстраивает их в многошаговые цепочки для компрометации кластера. Создан для red team и пентестеров. Что он делает kube-reaper сканирует...

CLEANSTART-2026-CD04274 Security fix for ghsa-hrxh-6v49-42gf applied in: aws-network-policy-agent 1.2.7-r0, fabric-peer 3.1.5-r1, gotenberg 8.33.0-r0, step 0.30.2-r4, kube-state-metrics-fips 2.20.0-r4, eks-distro-kube-apiserver 1.36.8-r0, eks-distro-kube-apiserver-fips 1.36.8-r0

ghsa-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RX78395 Security fix for ghsa-gcjh-h69q-9w9g applied in: kube-state-metrics-fips 2.20.0-r3, eks-distro-kube-scheduler 1.36.9-r2, eks-distro-kube-controller-manager-fips 1.36.8-r0, eks-distro-kube-apiserver 1.36.8-r0, eks-distro-kube-apiserver-fips 1.36.8-r0

ghsa-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZS73776 Security fix for ghsa-8wmf-6v46-5gfg applied in: eks-distro-kube-scheduler-fips 1.35.14-r0, eks-distro-kube-controller-manager-fips 1.36.8-r1, eks-distro-kube-apiserver 1.36.8-r2, eks-distro-kube-apiserver-fips 1.36.8-r1

ghsa-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QF95955 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the kube-state-metrics-fips package. gRPC-Go is the Go language implementation of gRPC...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 security and extras update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 security and extras update

Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 security and extras update

Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 security and extras update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

CLEANSTART-2026-JX77218 Kubernetes kube-apiserver in versions v1

Security vulnerability affects the nfs-subdir-external-provisioner package. The Kubernetes kube-apiserver in versions v1...

martian-packets

Martian Packets Репозиторий, содержащий Python-скрипт для создания «сырых» TCP/IP-пакетов. Используется для проверки марсианских пакетов в связи с уязвимостью, о которой было объявлено в Kubernetes kube-proxy: CVE-2020-8558. Этот PoC покрывает обход границы localhost на участке pod - node host...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: k9s, kargo, helm-set-status, k8sgpt, kyverno-notation-aws, tigera-operator, cert-manager-cmctl, gitness, kube-arangodb, xeol, manifest-tool, helm-mapkubeapis, helm-push, cluster-api-helm-controller, rancher-helm, opentofu, maru, flux-helm-controller...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: k9s, kargo, helm-set-status, k8sgpt, kyverno-notation-aws, tigera-operator, cert-manager-cmctl, gitness, kube-arangodb, xeol, manifest-tool, helm-mapkubeapis, helm-push, cluster-api-helm-controller, rancher-helm, opentofu, maru, flux-helm-controller...

CLEANSTART-2026-XS36799 Security fix for ghsa-p77j-4mvh-x3m3 applied in: kube-state-metrics-fips 2.18.0-r2

Security vulnerability affects the kube-state-metrics-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LY38808 Security fix for ghsa-hfvc-g4fc-pqhx applied in: kube-state-metrics-fips 2.18.0-r2

Security vulnerability affects the kube-state-metrics-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TV66074 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

Security vulnerability affects the kube-state-metrics-fips package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

CLEANSTART-2026-LJ85716 For certain crafted inputs, a 'ed25519

Security vulnerability affects the kube-state-metrics-fips package. For certain crafted inputs, a 'ed25519...

CLEANSTART-2026-ID88447 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

Security vulnerability affects the kube-state-metrics-fips package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

CLEANSTART-2026-UP22393 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the kube-state-metrics-fips package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-KP97729 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the kube-state-metrics-fips package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...