Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, kots, knative-kafka-broker, knative-eventing-fips, harbor-fips, prometheus-elasticsearch-exporter, kyverno-fips, k3s, prometheus-mongodb-exporter, tigera-operator, istio, coder-fips, loki, zot, prometheus-operator, drone-fips, k9s, elastic-agent-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, k3s, crossplane-provider-aws-s3, kubernetes-dashboard, prometheus, act, argo-events, prometheus-operator, zot, terragrunt, nuclei, kubernetes, wal-g, aactl, chisel, crossplane-provider-aws-ec2, k8sgpt, rootlesskit, chezmoi,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, k3s, kubernetes-dashboard, prometheus, act, argo-events, prometheus-operator, zot, terragrunt, nuclei, kubernetes, wal-g, aactl, chisel, k8sgpt, rootlesskit, chezmoi, snyk-cli, docker-machine-driver-harvester, cloud-provider-aws,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cert-manager, skaffold, k3s, kubernetes-dashboard, rancher, rancher-agent, external-dns, kaf, opentelemetry-collector, prometheus, zarf, spire-server, minio, prometheus-operator, zot, istio, kubernetes, cilium-cli, trivy, vitess, mattermost, telegraf, aactl, chisel,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cert-manager, skaffold, k3s, kubernetes-dashboard, rancher, rancher-agent, external-dns, kaf, opentelemetry-collector, prometheus, zarf, spire-server, minio, prometheus-operator, zot, istio, kubernetes, cilium-cli, trivy, vitess, mattermost, telegraf, aactl, chisel,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: cert-manager, docker-cli-buildx, k3s, kubernetes-dashboard, rancher, rancher-agent, external-dns, kaf, opentelemetry-collector, prometheus, spire-server, minio, prometheus-operator, zot, opentofu, istio, podman, kubernetes, cilium-cli, teleport, mattermost, telegraf,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: cert-manager, guac, skaffold, k3s, kubernetes-dashboard, gomplate, external-dns, kaf, opentelemetry-collector, prometheus, zarf, pulumi, witness, spire-server, minio, act, argo-events, prometheus-operator, nfpm, opentofu, wolfictl, splunk-otel-collector, gptscript,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cert-manager, docker-cli-buildx, k3s, kubernetes-dashboard, rancher, rancher-agent, external-dns, kaf, opentelemetry-collector, prometheus, spire-server, minio, prometheus-operator, zot, istio, podman, kubernetes, cilium-cli, teleport, mattermost, telegraf, vitess,...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, knative-kafka-broker, dcgm-exporter-fips, flannel-fips, crossplane-fips, cue, lvm-driver, task-fips, cloud-provider-azure-fips, boring-registry, kubernetes-dashboard-api-fips, azcopy-fips, azurefile-csi-fips, istio, plugin-barman-cloud,...

CLEANSTART-2026-MX15076 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-web package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL61187 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 7.14.0-r0, 7.14.0-r1

Multiple security vulnerabilities affect the kubernetes-dashboard package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW91368 Security fixes for CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.14.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: cert-manager, gitlab-pages, k3s, kubernetes-dashboard, external-dns, kaf, prometheus, aws-flb-cloudwatch, knative-operator, spire-server, go, prometheus-operator, zot, dask-gateway, istio, kubernetes, ingress-nginx-controller, cilium-cli, knative-eventing,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: cert-manager, gitlab-pages, k3s, kubernetes-dashboard, external-dns, kaf, prometheus, aws-flb-cloudwatch, knative-operator, spire-server, go, prometheus-operator, zot, dask-gateway, istio, kubernetes, ingress-nginx-controller, cilium-cli, knative-eventing,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, opentelemetry-operator, k3s, kubernetes-dashboard, kubernetes-dashboard-auth, trillian, terraform-docs, rabbitmq-messaging-topology-operator, prometheus, weaviate, aws-flb-cloudwatch, secrets-store-csi-driver, argo-events, prometheus-operator, zot,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, terraform-docs, spark-operator, pgpool2exporter, gobuster, act, aws-sigv4-proxy, zot, portieris, nri-discovery-kubernetes, knative-eventing, kafka-proxy, x509-certificate-exporter, kuberay-operator, bazelisk, snyk-cli, dynamic-localpv-provisione...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, opentelemetry-operator, k3s, kubernetes-dashboard, kubernetes-dashboard-auth, trillian, terraform-docs, rabbitmq-messaging-topology-operator, prometheus, weaviate, aws-flb-cloudwatch, secrets-store-csi-driver, argo-events, prometheus-operator, zot,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, terraform-docs, spark-operator, pgpool2exporter, gobuster, mkcert, act, aws-sigv4-proxy, zot, portieris, nri-discovery-kubernetes, knative-eventing, kafka-proxy, x509-certificate-exporter, kuberay-operator, bazelisk, snyk-cli,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: eks-node-monitoring-agent, victoriametrics-cluster-fips, volume-modifier-for-k8s, aws-network-policy-agent, newrelic-k8s-metadata-injection-fips, pluto-fips, karma-fips, k8s-metacollector, tailscale, envoy-ratelimit-fips, dataplaneapi-fips, ingress-nginx-controller,...