10662 matches found
CVE-2026-71567 User-controlled variables inserted unescaped into shell scripts and Kubernetes manifests
In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests. This mostly applies to the Image URL and BMC credentials which are not verified by FakeFish...
CVE-2026-71567
CVE-2026-71567 affects openshift-metal3/fakefish , a tool used for provisioning bare-metal infrastructure. The vulnerability is a shell injection caused by unquoted shell variables being inserted into command lines and Kubernetes manifests. The primary attack vectors are the Image URL and BMC cre...
CVE-2026-71567 User-controlled variables inserted unescaped into shell scripts and Kubernetes manifests
In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests. This mostly applies to the Image URL and BMC credentials which are not verified by FakeFish...
PT-2026-76762
Name of the Vulnerable Software and Affected Versions search-v2-operator affected versions not specified Description A flaw exists in the search-v2-operator where the search-serviceaccount is assigned overly broad permissions. This allows for the impersonation of users and groups across the entir...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-glue, crossplane-provider-aws-fis-fips, crossplane-provider-aws-datapipeline-fips, crossplane-provider-aws-opensearchserverless, crossplane-provider-sql-fips, kubernetes-csi-external-resizer-fips, crossplane, kubevela-fips, mcp-grafana-fips,...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-glue, crossplane-provider-aws-fis-fips, crossplane-provider-aws-datapipeline-fips, crossplane-provider-aws-opensearchserverless, crossplane-provider-sql-fips, kubernetes-csi-external-resizer-fips, crossplane, kubevela-fips, mcp-grafana-fips,...
GHSA-7QCH-W8M5-G3H3 vulnerabilities
Vulnerabilities for packages: nri-rabbitmq, loki, grafana-pyroscope, pulumi-kubernetes-operator, percona-server-mongodb-operator, gitness, dagdotdev, k3s, neuvector-dbgen, terraform-provider-google, flux, polaris, kubescape, malcontent, git-credential-oauth, task, k8ssandra-operator, cri-tools,...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: ollama, cue, kubernetes-csi-node-driver-registrar, crossplane-provider-aws-kms, crossplane-provider-azure-authorization, external-dns, grafana-pyroscope, karma, loki, pulumi-kubernetes-operator, volume-modifier-for-k8s, minio-object-browser, verticadb-operator,...
GHSA-XPHW-4F88-5F39 vulnerabilities
Vulnerabilities for packages: aws-sigv4-proxy, ollama, cue, victoriametrics, kubernetes-csi-node-driver-registrar, crossplane-provider-aws-kms, crossplane-provider-azure-authorization, external-dns, grafana-pyroscope, karma, loki, newrelic-infra-operator, esbuild, newrelic-nri-statsd,...
OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media
These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-56853 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-glue, crossplane-provider-aws-fis-fips, crossplane-provider-aws-datapipeline-fips, crossplane-provider-aws-opensearchserverless, crossplane-provider-sql-fips, git-sync-fips, kubernetes-csi-external-resizer-fips, kubevela-fips, mcp-grafana-fips...
GO-2026-6089 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-glue, crossplane-provider-aws-fis-fips, crossplane-provider-aws-datapipeline-fips, crossplane-provider-aws-opensearchserverless, crossplane-provider-sql-fips, git-sync-fips, kubernetes-csi-external-resizer-fips, kubevela-fips, mcp-grafana-fips...
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-glue, kubevela-fips, mcp-grafana-fips, task, redpanda-console, chisel, crossplane-provider-azure-kusto, crossplane-provider-terraform-fips, crossplane-provider-aws-bedrockagentcore, scalr-cli, volume-modifier-for-k8s,...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-glue, kubevela-fips, mcp-grafana-fips, task, redpanda-console, chisel, crossplane-provider-azure-kusto, crossplane-provider-terraform-fips, crossplane-provider-aws-bedrockagentcore, scalr-cli, volume-modifier-for-k8s,...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-glue, crossplane-provider-aws-fis-fips, crossplane-provider-aws-datapipeline-fips, crossplane-provider-aws-opensearchserverless, crossplane-provider-sql-fips, kubernetes-csi-external-resizer-fips, crossplane, kubevela-fips, mcp-grafana-fips,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-glue, kubevela-fips, mcp-grafana-fips, task, redpanda-console, chisel, crossplane-provider-azure-kusto, crossplane-provider-terraform-fips, crossplane-provider-aws-bedrockagentcore, scalr-cli, volume-modifier-for-k8s,...
CVE-2026-56859 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-glue, crossplane-provider-aws-fis-fips, crossplane-provider-aws-datapipeline-fips, crossplane-provider-aws-opensearchserverless, crossplane-provider-sql-fips, kubernetes-csi-external-resizer-fips, crossplane, kubevela-fips, mcp-grafana-fips,...
GHSA-5GJX-96WQ-C8R2 vulnerabilities
Vulnerabilities for packages: helm...