Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: reports-server, k9s, kubescape-server-fips, harbor, knative-serving-fips, minio, cilium, argocd-image-updater-fips, gatekeeper-fips, k3s, trivy, minio-fips, cloud-provider-aws, fscrypt, istio, knative-eventing-fips, prometheus-mongodb-exporter,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy, argo-cd, external-dns, helm, minio, rancher, zot, osv-scanner, prometheus-operator, rancher-agent, chisel, k3s, cilium, kubescape, kubernetes-dashboard, containerd, flux, vitess, telegraf, kubernetes, argocd-image-updater, kaf, knative-serving, snyk-cli,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-notification-controller, gomplate, pulumi-kubernetes-operator, k8sgpt, witness, minio, crossplane-provider-azure-authorization, tekton-chains, gh, chisel, cilium, kubernetes-dashboard, pulumi-language-dotnet, docker, flux, rancher-machine,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: flux-notification-controller, gomplate, pulumi-kubernetes-operator, k8sgpt, witness, minio, crossplane-provider-azure-authorization, tekton-chains, gh, chisel, cilium, melange, kubernetes-dashboard, pulumi-language-dotnet, crossplane-provider-aws-rds, docker, flux,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gomplate, gptscript, pulumi-kubernetes-operator, argo-cd, trivy, apko, external-dns, helm, minio, witness, zot, osv-scanner, prometheus-operator, wolfictl, k3s, cilium, dagger, kubescape, melange, guac, act, containerd, flux, kubernetes-dashboard, opentofu,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: argo-cd, external-dns, cert-manager, helm, minio, rancher, zot, prometheus-operator, rancher-agent, k3s, cilium, kubernetes-dashboard, containerd, flux, vitess, telegraf, kubernetes, kaf, knative-serving, podman, spire-server, buildah, loki, cloud-provider-aws, kots,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: argo-cd, external-dns, cert-manager, helm, minio, rancher, zot, prometheus-operator, rancher-agent, k3s, cilium, kubernetes-dashboard, containerd, flux, opentofu, vitess, telegraf, kubernetes, kaf, knative-serving, podman, spire-server, buildah, loki,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, trivy, argo-cd, external-dns, helm, minio, rancher, zot, osv-scanner, prometheus-operator, rancher-agent, chisel, k3s, cilium, kubescape, kubernetes-dashboard, containerd, flux, vitess, telegraf, kubernetes, argocd-image-updater, kaf,...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: trust-manager-fips, azurefile-csi, azcopy-fips, virt-handler, oauth2-proxy-fips, nri-mssql, cert-manager-csi-driver, velero-plugin-for-gcp, k3s, opensearch-k8s-operator-fips, goreleaser, flux-helm-controller-fips, terraform-provider-google-fips, volcano-fips,...

CLEANSTART-2026-MX15076 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-web package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL61187 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 7.14.0-r0, 7.14.0-r1

Multiple security vulnerabilities affect the kubernetes-dashboard package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW91368 Security fixes for CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.14.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: falco-no-driver, argo-cd, dask-gateway, external-dns, karpenter, zot, prometheus-operator, k3s, cilium, aws-flb-kinesis, aws-flb-cloudwatch, go, kubescape, kubernetes-dashboard, gitaly, flux, newrelic-fluent-bit-output, external-secrets-operator, telegraf, kubernetes...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: falco-no-driver, argo-cd, dask-gateway, external-dns, karpenter, zot, prometheus-operator, k3s, cilium, aws-flb-kinesis, aws-flb-cloudwatch, go, kubescape, kubernetes-dashboard, gitaly, flux, newrelic-fluent-bit-output, external-secrets-operator, telegraf, kubernetes...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, flannel, boring-registry, dask-gateway, kubernetes-dashboard-api, kubernetes-csi-external-attacher, cue, witness, kubernetes-dashboard-web, secrets-store-csi-driver-provider-aws, emissary, prometheus-pushgateway,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: supercronic, dask-gateway, witness, kubernetes-dashboard-web, grafana-operator, kubernetes-csi-driver-nfs, db-operator, flux, terraform-provider-kubernetes, temporal, kaf, podman, kubernetes-csi-livenessprobe, cloud-sql-proxy, cloud-provider-aws, filebrowser, kine,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, flannel, boring-registry, dask-gateway, kubernetes-dashboard-api, kubernetes-csi-external-attacher, cue, witness, kubernetes-dashboard-web, secrets-store-csi-driver-provider-aws, emissary, prometheus-pushgateway,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: supercronic, dask-gateway, witness, kubernetes-dashboard-web, grafana-operator, kubernetes-csi-driver-nfs, db-operator, flux, terraform-provider-kubernetes, temporal, kaf, podman, kubernetes-csi-livenessprobe, cloud-sql-proxy, cloud-provider-aws, filebrowser, kine,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: listmonk, commercial-chainloop-cli, victoriametrics, localstack, grafana-operator, aws-privateca-issuer, supercronic, victoriametrics-cluster-fips, goreleaser, oras, dbmate, nginx-kubernetes-ingress-fips, flux-helm-controller-fips, atlas-fips,...