trivy-operator

Kubernetes-native security toolkit. Documentation Introduction The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernete...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.4

Logging for Red Hat OpenShift - 6.5.4 Red Hat OpenShift Logging 6.5.4 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

dockerevil

dockerevil A simple repository to store my security flaws in the docker technology 2016 - 2017 Docker API Privilege EscalationLPE/RPE Escalate from Offline Server/Minimal Images/Build from TAR Dockerfile Docker SUDO Privilege Escalation PoC Nmap Scripts 2019 CodeStudent1995 Based Exploit OpenShif...

CVE-2026-121876

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

EUVD-2026-124550

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

CVE-2026-121876

A flaw exists in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers (confidential peer pods). The generator automatically discovers and mounts GPT partitions by type GUID at boot without user confirmation. In a confident...

CVE-2026-121876 Sandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

CVE-2026-121876

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

cve-2020-14386

Reproducer for CVE-2020-14386 Pre-built container: registry.svc.ci.openshift.org/coreos/cve-2020-14386 You probably want to test against an explicit node, like this: apiVersion: v1 kind: Pod metadata: name: cve-2020-14386 spec: restartPolicy: Never nodeName: containers: - name: cve-2020-14386...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.14

Logging for Red Hat OpenShift - 6.2.14 Red Hat OpenShift Logging 6.2.14 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2026-126643 Aap-gateway-operator: resource-server secret exposed in plaintext in the automationcontroller custom resource

A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the operator reads the protected resource-server Secret Secret/-resource-server, key controllerresourceserversecret and copies its plaintext value into the generated AutomationController cust...

EUVD-2026-124342

A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the operator reads the protected resource-server Secret Secret/-resource-server, key controllerresourceserversecret and copies its plaintext value into the generated AutomationController cust...

CVE-2026-126643

A cleartext storage flaw exists in the AAP Gateway Operator during the reconciliation of an AutomationController . The operator reads a protected resource-server Secret (controller_resource_server_secret) and copies its plaintext value into the spec.extra_settings (RESOURCE_SERVER.SECRET_KEY) of ...

PT-2026-145869

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers confidential peer pods. systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. ...

Critical: Red Hat Security Advisory: Red Hat Developer Hub 1.10.7 release.

Red Hat Developer Hub 1.10.7 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

fabric8io__kubernetes-client_CVE-2021-4178_5-0-2

Kubernetes & OpenShift Java Client This client provides access to the full Kubernetes & OpenShift REST APIs via a fluent DSL. kubernetes-client: kubernetes-model-core: openshift-client: knative-client: !Maven Centralhttps://img.shields.io/m...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.15.71 packages and security update

Red Hat OpenShift Container Platform release 4.15.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

openshift-ansible: openshift-ansible: Installer container downloads and executes remote inventory script without integrity verification

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

Important: Red Hat Security Advisory: RHTAS 1.4.5 - Red Hat Trusted Artifact Signer Release

The 1.4.5 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20...

Important: Red Hat Security Advisory: RHTAS 1.4.5 - Red Hat Trusted Artifact Signer Release

The 1.4.5 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20...