CVE-2025-22869 affecting package kubernetes for versions less than 1.30.10-3

CVE-2025-22869 affecting package kubernetes for versions less than 1.30.10-3. A patched version of the package is available...

CVE-2025-27144 affecting package kubernetes for versions less than 1.30.10-3

CVE-2025-27144 affecting package kubernetes for versions less than 1.30.10-3. A patched version of the package is available...

CVE-2025-0426 affecting package kubernetes for versions less than 1.30.10-1

CVE-2025-0426 affecting package kubernetes for versions less than 1.30.10-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-22868 affecting package kubernetes for versions less than 1.30.10-2

CVE-2025-22868 affecting package kubernetes for versions less than 1.30.10-2. A patched version of the package is available...

PT-2025-11205

Name of the Vulnerable Software and Affected Versions: Kubernetes affected versions not specified Description: The issue affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has...

Kubernetes 安全漏洞

Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from the Kubernetes open source. Kubernetes has a security vulnerability that stems from the vulnerability of nodes running the affected version...

Kubernetes 安全漏洞

Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from the Kubernetes open source. A security vulnerability exists in Kubernetes that stems from the use of the deprecated in-tree gitRepo volume feature, which could lead to...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: azcopy, falcosidekick-fips, buildkitd, kyverno, crossplane-provider-aws-eks, grafana-alloy, cilium-envoy-fips, crossplane, grafana-fips, karpenter-fips, boring-registry, kafkaexporter, kubeflow-pipelines, spark-operator, lazygit, cni-plugins, flux-source-controller,...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: fluent-operator, spire-server, yq, nats, sftpgo-plugin-geoipfilter, nuclei, crossplane-provider-aws-cloudfront, yunikorn-k8shim, spiffe-helper, kyverno-notation-aws, q, helm-operator, lazygit, dbmate, sftpgo-plugin-eventstore, crossplane-provider-azure-storage, rook,...

Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries

Impact In a Kubernetes environment, Ratify can be configured to authenticate to a private Azure Container Registry ACR. The Azure workload identity and Azure managed identity authentication providers are configured in this setup. Users that configure a private ACR to be used with the Azure...

GHSA-44F7-5FJ5-H4PX Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries

Impact In a Kubernetes environment, Ratify can be configured to authenticate to a private Azure Container Registry ACR. The Azure workload identity and Azure managed identity authentication providers are configured in this setup. Users that configure a private ACR to be used with the Azure...

CVE-2025-27403

The CVE describes a vulnerability in Ratify where Azure authentication providers could exchange an Entra ID token for an ACR refresh token without verifying that the target registry is an Azure Container Registry. This could allow EID tokens with ACR access to be exposed if a workload references ...

CVE-2025-27403 Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries

Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate to a private Azu...

CVE-2025-27403 Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries

Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate to a private Azu...

CVE-2025-22868 affecting package kubernetes for versions less than 1.28.4-15

CVE-2025-22868 affecting package kubernetes for versions less than 1.28.4-15. A patched version of the package is available...

CVE-2025-27144 affecting package kubernetes for versions less than 1.28.4-15

CVE-2025-27144 affecting package kubernetes for versions less than 1.28.4-15. A patched version of the package is available...

CVE-2025-22869 affecting package kubernetes for versions less than 1.28.4-15

CVE-2025-22869 affecting package kubernetes for versions less than 1.28.4-15. A patched version of the package is available...

OESA-2025-1259 kubernetes security update

Container cluster management. Security Fixes: A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.CVE-2025-0426...

Scale Transcoding and AI Workloads with GPU Kubernetes Clusters

...

Low: ecs-init

Issue Overview: runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between t...