168 matches found
CVE-2020-4062
In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...
CVE-2025-24376 The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources
kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespaced resources. The resources to be evaluated are determined by the rules provided by the user when...
CVE-2025-24376
CVE-2025-24376 concerns the kubewarden-controller for Kubernetes. It states that AdmissionPolicy and AdmissionPolicyGroup can be used to affect namespaced resources, enabling an attacker to prevent creation/update of PolicyReport objects and potentially mutate PolicyReport contents within a names...
Important: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.5 security updates and bug fixes
Multicluster Engine for Kubernetes 2.6.5 General Availability release images, which provide enhancements, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...
Important: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.7.3 security updates and bug fixes
Multicluster Engine for Kubernetes 2.7.3 General Availability release images, which provide enhancements, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...
Securing the Container Frontier: Kubernetes Trends Report 2025
From rapid-fire attack attempts to evolving defense strategies, our Kubernetes Security Report paints a vivid picture of a dynamic landscape. Check out the preview here...
Important: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.4.7 security updates and bug fixes
Multicluster Engine for Kubernetes 2.4.7 General Availability release images, which provide enhancements, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...
CVE-2025-21614 vulnerabilities
Vulnerabilities for packages: argo-events, flux-kustomize-controller-fips, skaffold, kots, argo-cd, argocd-image-updater, nemo, go-licenses, syft, task, gitea-fips, melange, pulumi-language-dotnet, flux-source-controller, kubevela, grype, nuclei, grafana-alloy, packer-fips, argo-events-fips,...
Moderate: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.4 security enhancements and bug fixes
Multicluster Engine for Kubernetes 2.6.4 General Availability release images, which provide enhancements, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...
MGASA-2024-0389 Updated kubernetes packages fix security vulnerabilities
A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...
Moderate: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.7.2 security updates and bug fixes
Multicluster Engine for Kubernetes 2.7.2 General Availability release images, which provide enhancements, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...
THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 - Oct 27)
Cybersecurity news can sometimes feel like a never-ending horror movie, can't it? Just when you think the villains are locked up, a new threat emerges from the shadows. This week is no exception, with tales of exploited flaws, international espionage, and AI shenanigans that could make your head...
SUSE-SU-2024:3341-1 Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. bsc1194400 - CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugin. bsc1211630 - CVE-2023-2728: bypass of...
GO-2022-0908 Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes
Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes...
GO-2022-0885 Improper Authentication in Kubernetes in k8s.io/kubernetes
Improper Authentication in Kubernetes in k8s.io/kubernetes...
GO-2023-1977 Kubernetes can trigger deletion of arbitrary files from the nodes where containers are running in k8s.io/kubernetes
Kubernetes can trigger deletion of arbitrary files from the nodes where containers are running in k8s.io/kubernetes...
Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters
Cybersecurity researchers have disclosed a security flaw impacting Microsoft Azure Kubernetes Services that, if successfully exploited, could allow an attacker to escalate their privileges and access credentials for services used by the cluster. "An attacker with command execution in a pod runnin...
Git-Syncing into Trouble: Exploring Command Injection Flaws in Kubernetes
...