Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: databricks-cli-fips, rancher-agent, virt-api, elastic-agent, apko-fips, argo-cd-fips, chainloop-cli-fips, eksctl, tigera-operator-fips, k6-operator, polaris-fips, kubernetes, kubevirt-cdi-uploadproxy, grafana-fips, cadvisor-fips, wave-fips, grype-fips, harbor-cli,...

CLEANSTART-2026-MX15076 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-web package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL61187 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 7.14.0-r0, 7.14.0-r1

Multiple security vulnerabilities affect the kubernetes-dashboard package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW91368 Security fixes for CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.14.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: aactl, kine, spire-server, snyk-cli, k8s-device-plugin, cert-manager, cloud-provider-aws, grafana, istio, aws-flb-cloudwatch, runc, telegraf, zot, argo-cd, nerdctl, kube-arangodb, hubble, k3s, knative-serving, redka, newrelic-fluent-bit-output, falco-no-driver,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: aactl, kine, spire-server, snyk-cli, k8s-device-plugin, cert-manager, cloud-provider-aws, grafana, istio, aws-flb-cloudwatch, runc, telegraf, zot, argo-cd, nerdctl, kube-arangodb, hubble, k3s, knative-serving, redka, newrelic-fluent-bit-output, falco-no-driver,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: spire-server, verticadb-operator, dbmate, temporal-ui-server, secrets-store-csi-driver-provider-azure, step-kms-plugin, cert-manager, modelmesh-runtime-adapter, polaris, cosign, policy-controller, helm-mapkubeapis, envoy-ratelimit, rancher, aws-flb-cloudwatch,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: dbmate, temporal-ui-server, cert-manager, nri-nginx, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, rancher-fleet, incert, vendir, redka, vault-k8s, timoni, mc, timescaledb-parallel-copy, falcoctl, hcloud, sftpgo-plugin-eventsearch, dive,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: spire-server, verticadb-operator, dbmate, temporal-ui-server, secrets-store-csi-driver-provider-azure, step-kms-plugin, cert-manager, modelmesh-runtime-adapter, polaris, cosign, policy-controller, helm-mapkubeapis, envoy-ratelimit, rancher, aws-flb-cloudwatch,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: dbmate, temporal-ui-server, cert-manager, nri-nginx, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, rancher-fleet, incert, vendir, redka, vault-k8s, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, falcoctl, hcloud, sftpgo-plugin-eventsearch,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: supercronic, grafana-operator, flux-source-watcher-fips, nemo, karma-fips, karpenter-fips, sealed-secrets-fips, flux-helm-controller-fips, hubble, k8s-metacollector, external-secrets-operator, polaris-fips, cilium-fips, newrelic-infra-operator, k8s-metacollector-fips...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: supercronic, grafana-operator, flux-source-watcher-fips, nemo, karma-fips, karpenter-fips, sealed-secrets-fips, flux-helm-controller-fips, hubble, k8s-metacollector, external-secrets-operator, polaris-fips, cilium-fips, newrelic-infra-operator, k8s-metacollector-fips...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, json-exporter-fips, jitsucom-bulker, karma-fips, memcached-exporter-fips, rancher-agent, crossplane-provider-aws-lambda-fips, virt-api,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, json-exporter-fips, jitsucom-bulker, karma-fips, memcached-exporter-fips, rancher-agent, crossplane-provider-aws-lambda-fips, virt-api,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: supercronic, direnv, cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, hugo, json-exporter-fips, jitsucom-bulker, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, hugo, json-exporter-fips, jitsucom-bulker, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, kube-logging-operator-custom-runner-fips, eksctl, polaris-fips, cluster-api-ipam-provider-in-cluster, terraform-provider-databricks-fips, nri-rabbitmq, podman-fips, git-lfs, cephcsi, fq, crossplane-provider-aws-ec2-fips, gosu, stern,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, hugo, json-exporter-fips, jitsucom-bulker, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, hugo, json-exporter-fips, jitsucom-bulker, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent,...