kubeeye

English | 中文 KubeEye is a cloud-native cluster inspection tool specifically designed for Kubernetes, capable of identifying issues and risks within the Kubernetes cluster based on custom rules. QuickStart Installation Download the installation package from Releases, which includes Helm chart, dem...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: tempo, metrics-server, prometheus, prometheus-operator, aws-otel-collector, splunk-otel-collector, prometheus-pushgateway, jaeger, istio, minio, datadog-agent, grafana, keda, trillian, mc, loki, k8sgpt, node-problem-detector, karma, minio-operator,...

CLEANSTART-2026-UF04910 Security fixes in node-problem-detector 0.8.19-r2

Package node-problem-detector version 0.8.19-r2 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27137, CVE-2026-27138...

CLEANSTART-2026-BX42425 Security fixes in node-problem-detector 0.8.19-r1

Package node-problem-detector version 0.8.19-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: tempo, metrics-server, minio-object-browser, aws-otel-collector, splunk-otel-collector, prometheus-pushgateway, opentelemetry-collector-contrib, jaeger, istio, telegraf, minio, datadog-agent, keda, trillian, mc, loki, k8sgpt, node-problem-detector, karma,...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: tempo, minio-object-browser, aws-otel-collector, splunk-otel-collector, prometheus-pushgateway, grafana-pyroscope, jaeger, istio, telegraf, minio, datadog-agent, keda, trillian, mc, loki, karma, minio-operator, cloud-sql-proxy, mcp-grafana, certificate-transparency...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: tempo, minio-object-browser, aws-otel-collector, splunk-otel-collector, prometheus-pushgateway, grafana-pyroscope, jaeger, istio, telegraf, minio, datadog-agent, keda, trillian, mc, loki, karma, minio-operator, cloud-sql-proxy, mcp-grafana, certificate-transparency...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: azure-service-operator, dbmate, aws-flb-firehose, cloud-provider-vsphere, delve, terraform-docs, kubeflow-katib, migrate, go-discover, coredns, kubescape, external-dns, osv-scanner, tetragon, trivy, prometheus-pushgateway, kubernetes-csi-external-attacher,...

CLEANSTART-2026-KR58137 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, ghsa-6v2p-p543-phr9 applied in versions: 0.8.19-r0, 0.8.19-r1, 0.8.19-r2

Multiple security vulnerabilities affect the node-problem-detector package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2. A patched version of the package is available...

CVE-2023-48795 affecting package node-problem-detector for versions less than 0.8.20-2

CVE-2023-48795 affecting package node-problem-detector for versions less than 0.8.20-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-22869 affecting package node-problem-detector for versions less than 0.8.20-2

CVE-2025-22869 affecting package node-problem-detector for versions less than 0.8.20-2. A patched version of the package is available...

CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16

CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16. A patched version of the package is available...

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6. A patched version of the package is available...

AZL-57323 CVE-2025-22869 affecting package node-problem-detector for versions less than 0.8.20-2

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57315 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57410 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-f5, aws-load-balancer-controller, aws-flb-firehose, kyverno-policy-reporter, helm-push, delve, terraform-docs, shfmt, kubeflow-katib, ytt, nri-prometheus, gobuster, nri-nginx, kubernetes-csi-external-provisioner, kube-logging-operator, prometheus-pushgateway,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-f5, aws-load-balancer-controller, aws-flb-firehose, kyverno-policy-reporter, helm-push, delve, terraform-docs, shfmt, kubeflow-katib, ytt, nri-prometheus, gobuster, nri-nginx, kubernetes-csi-external-provisioner, kube-logging-operator, prometheus-pushgateway,...

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4. A patched version of the package is available...