Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: syft, temporal-fips, kyverno-policy-reporter-kyverno-plugin, logstash-exporter-fips, kubeflow-fips, gh, crossplane-provider-aws-eks, grafana-operator-fips, vexctl, nats, prometheus-elasticsearch-exporter-fips, conftest-fips, capslock, cfssl, azure-aad-pod-identity-mi...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, aactl, kpt, bom, kubernetes-dashboard...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: kpt, aactl, kubernetes-dashboard, bom, argocd-image-updater...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: spire-server, wolfictl, aactl, gitsign, kube-rbac-proxy, falcoctl, zarf, temporal-ui-server, gomplate, vexctl, step-ca, goreleaser, melange, oauth2-proxy, ko, rekor, flux-kustomize-controller, apko, kubescape, sops, zot, argo-workflows, cloudflared, temporal, dex,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: flux, spire-server, aactl, gitaly, ingress-nginx-controller, argo-cd, kyverno, falco-no-driver, cilium-cli, snyk-cli, prometheus, k8s-device-plugin, kubescape, zot, aws-flb-firehose, external-dns, aws-flb-kinesis, gitlab-kas, aws-flb-cloudwatch, istio, k3s, kaf, runc...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: buildah, spire-server, wolfictl, zarf, argo-cd, kyverno, crossplane-provider-family-aws, vault-benchmark, pulumi, terraform-provider-tls, rancher-machine, gitlab-runner, k3s, src, crossplane-provider-aws-firehose, dagger, docker-compose, grype, telegraf, slsa-verifie...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: flux, containerd, spire-server, osv-scanner, wolfictl, splunk-otel-collector, aactl, knative-serving, gitea, act, zarf, gomplate, argo-cd, pulumi-language-yaml, kyverno, cilium-cli, argocd-image-updater, melange, prometheus, nfpm, pulumi, pulumi-language-dotnet,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: k3d, grpcurl, aactl, kubernetes-dashboard-metrics-scraper, ip-masq-agent, go-md2man, flannel-cni-plugin, amass, cni-plugins, scorecard, sbom-scorecard, cass-operator, go-bindata, protoc-gen-go-grpc, sops, aws-flb-firehose, nats, hey, aws-flb-kinesis, docker-cli,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: croc, kubernetes-dashboard-api, spire-server, osv-scanner, tfsec, aactl, k8sgateway, terraform-provider-pagerduty, ingress-nginx-controller, kubo, rancher-helm, goreleaser, cilium-cli, falco-no-driver, bento, redis-operator, headlamp, thanos-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gitleaks, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, spire-server, tetragon, vault-secrets-webhook, rancher-telemetry, ingress-nginx-controller, actions-runner-controller, mongodb-kubernetes-operator, kubo, kubernetes-csi-livenessprobe,...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: spire-server, nfs-subdir-external-provisioner, vault-env, rancher-telemetry, sftpgo-plugin-eventsearch, step-ca, aws-load-balancer-controller, nri-mysql, authservice, kube-metrics-adapter, licenseclassifier, docker-cli, overmind, ratify, kubelet-csr-approver, bom,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, delve, polaris, gcsfuse, rclone, oauth2-proxy, nri-mysql, swagger, kubernetes-csi-external-health-monitor, kapp, rancher-system-upgrade-controller, docker-cli, nginx-prometheus-exporter, terraform-mcp-server, k3s, src, cis-operator, ini-file,...

CLEANSTART-2026-RS31344 Security fixes in kubernetes-dashboard 7.14.0-r1

Package kubernetes-dashboard version 7.14.0-r1 fixes 21 vulnerabilities: CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-ZL91163 Security fixes in kubernetes-dashboard-metrics-scraper 1.2.2-r1

Package kubernetes-dashboard-metrics-scraper version 1.2.2-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139...

CLEANSTART-2026-ZB20397 Security fixes in kubernetes-dashboard-auth-fips 1.4.0-r2

Package kubernetes-dashboard-auth-fips version 1.4.0-r2 fixes 21 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-MX87072 Security fixes in kubernetes-dashboard-metrics-scraper 1.2.2-r2

Package kubernetes-dashboard-metrics-scraper version 1.2.2-r2 fixes 22 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-XV94237 Security fixes in kubernetes-dashboard-api 1.14.0-r1

Package kubernetes-dashboard-api version 1.14.0-r1 fixes 27 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469, CVE-2026-39820, CVE-2026-25679, CVE-2026-27143...

CLEANSTART-2026-IY64694 Security fixes in kubernetes-dashboard-api-fips 1.14.0-r1

Package kubernetes-dashboard-api-fips version 1.14.0-r1 fixes 27 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469, CVE-2026-39820, CVE-2026-25679, CVE-2026-27143...

CLEANSTART-2026-UB53379 Security fixes in kubernetes-dashboard-fips 7.14.0-r0

Package kubernetes-dashboard-fips version 7.14.0-r0 fixes 17 vulnerabilities: CVE-2026-27140, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282...