Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: cilium, minio, containerd, loki, runc, telegraf, cert-manager, aactl, kaf, helm, kubernetes, kyverno, flux, kine, k3s, kubo, kube-fluentd-operator, kubernetes-dashboard, external-dns, fuse-overlayfs-snapshotter...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: cilium, minio, containerd, loki, runc, telegraf, cert-manager, aactl, kaf, helm, kubernetes, kyverno, flux, kine, k3s, kubo, kube-fluentd-operator, kubernetes-dashboard, external-dns, fuse-overlayfs-snapshotter...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, fuse-overlayfs-snapshotter, kine, coder, kubo, kube-state-metrics, kyverno, loki, minio, k3s, cert-manager, kubernetes, reports-server, coder-fips, telegraf, livekit-cli, cilium-envoy-fips, kubernetes-dashboard, runc,...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, fuse-overlayfs-snapshotter, kine, coder, kubo, kube-state-metrics, kyverno, loki, minio, k3s, cert-manager, kubernetes, reports-server, coder-fips, telegraf, livekit-cli, cilium-envoy-fips, kubernetes-dashboard, runc,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: ocm-kubernetes-controller, kine, caddy, docker-fips, cluster-autoscaler-fips, helmfile, kubernetes-csi-node-driver-registrar-fips, ocm-kubernetes-controller-fips, authentik, gatekeeper-fips, kyverno, cert-manager-fips, grafana, loki, prometheus-operator, cilium-cli,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: trivy, trivy-fips, kine, argocd-image-updater-fips, gatekeeper-fips, kyverno, loki, minio, prometheus-operator, argo-cd, cilium-cli, kubernetes, seaweedfs-rocksdb, argo-cd-fips, omnictl-multiarch, zitadel, calico-fips, k9s-fips, cloudbeat, nemo,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: step, dagger, traefik, glab, nerdctl, crossplane-provider-aws-ec2, minio, containerd, loki, kots, cert-manager, ko, pulumi, crossplane-provider-aws-kms, fscrypt, syft, crossplane-provider-aws-eks, kyverno, kine, crossplane-provider-aws-elasticache, apko,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: istio, cloud-provider-aws, cilium, nerdctl, knative-serving, zarf, minio, containerd, loki, kots, telegraf, cert-manager, k9s, trivy-operator, aactl, kaf, cilium-cli, rancher, flux-image-automation-controller, helm, opentelemetry-collector, argocd-image-updater, triv...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: step, dagger, glab, nerdctl, minio, containerd, loki, kots, cert-manager, ko, docker-machine-driver-harvester, pulumi, fscrypt, syft, kyverno, kine, apko, osv-scanner, terragrunt, kargo, guac, sops, fulcio, pulumi-language-yaml, istio, knative-serving, mods, argo-cd,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: istio, cloud-provider-aws, cilium, nerdctl, knative-serving, zarf, minio, containerd, loki, kots, telegraf, cert-manager, k9s, docker-machine-driver-harvester, trivy-operator, aactl, kaf, cilium-cli, rancher, flux-image-automation-controller, helm,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: dagger, pulumi-language-yaml, istio, cloud-provider-aws, cilium, nerdctl, knative-serving, nuclei, zarf, minio, containerd, argo-cd, loki, kots, telegraf, cert-manager, k9s, trivy-operator, aactl, argo-events, kaf, cilium-cli, podman, gptscript,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: istio, cloud-provider-aws, cilium, nerdctl, knative-serving, docker-cli-buildx, buildah, minio, containerd, loki, kots, telegraf, cert-manager, aactl, kaf, cilium-cli, podman, rancher, helm, opentelemetry-collector, fscrypt, kubernetes, kyverno, flux, kine, k3s,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: istio, cloud-provider-aws, cilium, nerdctl, knative-serving, docker-cli-buildx, buildah, minio, containerd, loki, kots, telegraf, cert-manager, aactl, kaf, cilium-cli, podman, rancher, helm, opentelemetry-collector, fscrypt, kubernetes, kyverno, flux, kine, k3s,...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, rabbitmq-messaging-topology-operator-fips, helmfile, temporal-ui-server, hcloud, authentik, grafana, argo-cd, seaweedfs-rocksdb, terragrunt-fips, secrets-store-csi-driver, gatus-fips, step-kms-plugin-fips, velero, stern, kube-rbac-proxy,...

CLEANSTART-2026-MX15076 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-web package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL61187 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 7.14.0-r0, 7.14.0-r1

Multiple security vulnerabilities affect the kubernetes-dashboard package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW91368 Security fixes for CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.14.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: karpenter, istio, cloud-provider-aws, cilium, prometheus-operator, newrelic-fluent-bit-output, redka, dask-gateway, nerdctl, kubernetes-csi-node-driver-registrar, gitlab-pages, go, argo-cd, hubble, runc, kots, telegraf, cert-manager, coredns, aactl, kaf, cilium-cli,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: karpenter, istio, cloud-provider-aws, cilium, prometheus-operator, newrelic-fluent-bit-output, redka, dask-gateway, nerdctl, kubernetes-csi-node-driver-registrar, gitlab-pages, go, argo-cd, hubble, runc, kots, telegraf, cert-manager, coredns, aactl, kaf, cilium-cli,...