CVE-2026-103546 Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

CVE-2026-103546 Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

CVE-2026-103546

The MongoDB Controllers for Kubernetes are vulnerable to improper validation of Ops Manager backup configuration . An attacker with permissions to modify an OpsManager custom resource can trigger unintended administrative changes in Ops Manager. This vulnerability specifically impacts deployments...

CVE-2026-103546 Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: minio, podinfo, maru, dbmate, dockerize, kapp-controller, vault-benchmark, gke-gcloud-auth-plugin, kustomize, cortex, nri-haproxy, chisel, verticadb-operator, postgres-operator, kubernetes-csi-livenessprobe, fluxcd-kustomize-mutating-webhook, rabbitmq-cluster-operato...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: backup-restore-operator-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, kyverno-policy-reporter-kyverno-plugin, minio-fips, victoriametrics, gitlab-workhorse-ce, stern, spark-operator-fips, crossplane-provider-aws-ecs-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, backup-restore-operator-fips, atlas, coredns-fips, prometheus-node-exporter-fips, kubebuilder, sftpgo-plugin-auth, mesosphere-vsphere-csi-fips, dex-fips, kcp-fips, influxd, kyverno-policy-reporter-kyverno-plugin, minio-fips, gitaly,...

EUVD-2020-28853

Malware in sbrugna...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: checksec, vault-benchmark, k8sgpt-operator, blobfuse2, git-lfs, secrets-store-csi-driver-provider-aws, container-object-storage-interface, lvm-driver, sftpgo-plugin-geoipfilter, terraform-provider-time, newrelic-fluent-bit-output, addon-resizer, local-path-provisione...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: checksec, vault-benchmark, k8sgpt-operator, blobfuse2, git-lfs, secrets-store-csi-driver-provider-aws, container-object-storage-interface, lvm-driver, sftpgo-plugin-geoipfilter, terraform-provider-time, newrelic-fluent-bit-output, addon-resizer, local-path-provisione...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, prometheus-node-exporter-fips, vault-k8s, shfmt, node-problem-detector-fips, secrets-store-csi-driver-fips, octo-sts, eks-distro-fips, knative-eventing, local-path-provisioner, openbao-k8s-fips, cluster-api, karpenter-fips, confluent-common-docker,...