GO-2025-4105 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2025-4107 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2025-4110 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2026-5538 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2026-5848 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2025-4109 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2025-4103 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2024-3304 vulnerabilities

Vulnerabilities for packages: kubevela, pulumi, rancher-machine, docker-machine-driver-harvester...

GO-2024-2500 vulnerabilities

Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...

GO-2024-2914 vulnerabilities

Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...

GO-2022-0390 vulnerabilities

Vulnerabilities for packages: ctop, docker-machine-driver-harvester, rancher-machine...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: trufflehog, kubernetes-csi-livenessprobe, vault-benchmark, redka, traefik, karpenter, azure-workload-identity-webhook, kube-state-metrics, addon-resizer, terraform-provider-azurerm, kubescape-operator, q, sops, spqr, apache-exporter, external-secrets-operator,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: openbao, grype, splunk-otel-collector, vault-benchmark, docker-compose, traefik, go-discover, terraform-provider-azurerm, sops, crossplane-provider-aws-iam, kine, external-secrets-operator, kubernetes, external-dns, prometheus, crossplane-provider-family-azure,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, vault-benchmark, terraform-provider-pagerduty, helm-set-status, redka, traefik, pgtimetable, azure-workload-identity-webhook, kyverno-policy-reporter-ui, rancher-loglevel, k3d, kubescape-operator, aws-signer-notation-plugin, sops,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, helm-set-status, portieris, cni-plugins, k3d, nri-redis, kubernetes-dashboard-api, ip-masq-agent, prometheus, gobuster, opentofu, wgcf, k8sgateway, nginx-prometheus-exporter, gcsfuse, bom, kor, gptscript, chartmuseum, nova, nri-memcached...

CVE-2026-72671

A Kibana Machine Learning capability that removes a saved object from the current space accepts machine learning trained models as a target, but it verifies only the privileges that apply to anomaly detection jobs and data frame analytics jobs. A user whose role grants create anomaly detection jo...

CVE-2026-72642

The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...

CVE-2026-72629 Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained Models

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized cross-space access via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. The result is disclosure of inference output from a trained model in a different space that the user is not authoriz...

EUVD-2026-58262

Missing Authorization CWE-862 in Kibana can lead to cross-space information disclosure and unauthorized data modification via Privilege Abuse CAPEC-122. Kibana Machine Learning carries out its Elasticsearch operations with elevated internal permissions and relies on a per-request space filter to...