Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, cilium, cert-manager, flux, containerd, kine, aactl, external-dns, kyverno, fuse-overlayfs-snapshotter, telegraf, loki, runc, kaf, minio, kubernetes, kubo, helm, kubernetes-dashboard, k3s...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, cilium, cert-manager, flux, containerd, kine, aactl, external-dns, kyverno, fuse-overlayfs-snapshotter, telegraf, loki, runc, kaf, minio, kubernetes, kubo, helm, kubernetes-dashboard, k3s...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: livekit-cli, minio, containerd, coder-fips, terraform, loki, azure-aad-pod-identity-mic, runc, telegraf, kubo-fips, cert-manager, coder, aactl, kaf, opentelemetry-collector-k8s, prometheus-elasticsearch-exporter, reports-server, helm, tigera-operator, kubernetes,...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: livekit-cli, minio, containerd, coder-fips, terraform, loki, azure-aad-pod-identity-mic, runc, telegraf, kubo-fips, cert-manager, coder, aactl, kaf, opentelemetry-collector-k8s, prometheus-elasticsearch-exporter, reports-server, helm, tigera-operator, kubernetes,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: authentik, karpenter, traefik, elastic-agent, envoy-gateway-fips, gitlab-workhorse-ce-fips, azurefile-csi, helmfile, glab, nerdctl, harbor, commercial-spilo, rke2-runtime, containerd, elastic-agent-fips, apm-server, keda-fips, azure-aad-pod-identity-mic, loki,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, traefik, gitlab-workhorse-ce-fips, nerdctl, harbor, knative-kafka-broker, minio, containerd, elastic-agent-fips, coder-fips, seaweedfs-rocksdb, keda-fips, loki, skaffold-fips, kots, cert-manager, docker-machine-driver-harvester,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildkitd, buildah, docker-machine-driver-harvester, cert-manager, flux, argo-events, knative-serving, chezmoi, argocd-image-updater, age, grype, rootlesskit, gitlab-kas, loki, terraform-provider-tls, flux-source-controller, trivy-operator, falcoctl, opentofu, minio,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, spire-server, kots, trivy, zarf, cilium, prometheus, k9s, cert-manager, snyk-cli, prometheus-operator, flux, cloud-provider-aws, containerd, kine, aactl, external-dns, kyverno, rancher, istio, cilium-cli, knative-serving, gitea,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: buildkitd, crossplane-provider-aws-iam, buildah, cert-manager, src, flux, argo-events, crossplane-provider-aws-eks, knative-serving, chezmoi, argocd-image-updater, grype, crossplane-provider-aws-sns, rootlesskit, crossplane-provider-aws-cloudwatchlogs, gitlab-kas,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: spire-server, kots, cilium, buildah, prometheus, podman, cert-manager, snyk-cli, prometheus-operator, flux, cloud-provider-aws, containerd, kine, aactl, external-dns, kyverno, docker-cli-buildx, istio, cilium-cli, knative-serving, fscrypt, gitlab-kas, telegraf,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: spire-server, kots, cilium, buildah, prometheus, podman, cert-manager, snyk-cli, prometheus-operator, flux, cloud-provider-aws, containerd, kine, aactl, external-dns, kyverno, docker-cli-buildx, istio, cilium-cli, knative-serving, fscrypt, gitlab-kas, telegraf,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, spire-server, kots, trivy, zarf, cilium, prometheus, k9s, docker-machine-driver-harvester, cert-manager, snyk-cli, prometheus-operator, flux, cloud-provider-aws, containerd, kine, aactl, external-dns, kyverno, rancher, istio,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, spire-server, kots, pulumi-language-dotnet, scorecard, cilium, prometheus, trivy, zarf, k9s, external-secrets-operator, podman, cert-manager, pulumi-kubernetes-operator, nfpm, prometheus-operator, flux, snyk-cli, splunk-otel-collecto...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: nri-mssql, cloud-provider-gcp-cloud-controller-manager-fips, elastic-agent, cert-exporter-fips, spark-operator-fips, velero-fips, opensearch-k8s-operator-fips, loki, newrelic-nri-kube-events, knative-kafka-broker-fips, nri-mssql-fips, seaweedfs-operator, azuredisk-cs...

CLEANSTART-2026-MX15076 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-web package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL61187 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 7.14.0-r0, 7.14.0-r1

Multiple security vulnerabilities affect the kubernetes-dashboard package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW91368 Security fixes for CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.14.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, coredns, spire-server, hubble, gitaly, kubernetes-csi-node-driver-registrar, kots, cilium, prometheus, datadog-agent, external-secrets-operator, cert-manager, snyk-cli, prometheus-operator, flux, k8s-device-plugin, cloud-provider-aws, kine,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, coredns, spire-server, hubble, gitaly, kubernetes-csi-node-driver-registrar, kots, cilium, prometheus, datadog-agent, external-secrets-operator, cert-manager, snyk-cli, prometheus-operator, flux, k8s-device-plugin, cloud-provider-aws, kine,...