podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

fleetdeck-poc

FleetDeck PoC !Go Versionhttps://img.shields.io/badge/go-...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

10 Evaluation Points for Your App Platform on Kubernetes

...

[SECURITY] Fedora 41 Update: checkpointctl-1.4.0-3.fc41

The checkpointctl command can be used for in-depth analysis of container checkpoints created with Podman and Kubernetes...

CVE-2025-9708 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

GHSA-W7R3-MGWF-4MQQ vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

[SECURITY] Fedora 42 Update: checkpointctl-1.4.0-3.fc42

The checkpointctl command can be used for in-depth analysis of container checkpoints created with Podman and Kubernetes...

[SECURITY] Fedora 43 Update: checkpointctl-1.4.0-3.fc43

The checkpointctl command can be used for in-depth analysis of container checkpoints created with Podman and Kubernetes...

CVE-2025-9708 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

GHSA-W7R3-MGWF-4MQQ vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

Privilege Escalation

Kubernetes is vulnerable to Privilege Escalation. The vulnerability is due to improper access control because node users can patch their node object with an OwnerReference to a cluster-scoped resource, leading to unintended node deletion via garbage collection...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, cloud-provider-aws, kube-vip-cloud-provider, kserve-rest-proxy, kube-vip, k8sgpt-operator, git-lfs, kuberay-operator, custom-pod-autoscaler-operator, pvc-autoresizer, gitsign, newrelic-fluent-bit-output, vexctl, vault-benchmark,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: rancher-machine, cloud-provider-aws, kube-vip-cloud-provider, kserve-rest-proxy, kube-vip, k8sgpt-operator, git-lfs, kuberay-operator, custom-pod-autoscaler-operator, pvc-autoresizer, gitsign, newrelic-fluent-bit-output, vexctl, vault-benchmark,...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, jruby...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: yace-fips, nvidia-nsight-compute-13.0, mattmoor-chainit, mongodb-kubernetes-operator, etcd-fips, confluent-common-docker, pvc-autoresizer, prometheus-beat-exporter-fips, kube-vip-cloud-provider, apm-server-fips, addon-resizer, consul-fips, newrelic-nri-statsd,...

weblogic-monitoring-exporter

This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...

OESA-2025-2318 kubernetes security update

Container cluster management. Security Fixes: A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference...