GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: guac, kube-arangodb, gpu-operator, gpu-operator-fips, kube-arangodb-fips...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: guac, kube-arangodb, gpu-operator, gpu-operator-fips, kube-arangodb-fips...

Authorization Bypass

Apache Camel is vulnerable to Authorization Bypass. The vulnerability is due to insufficient validation of user-controlled Build resources, which allows an authorized attacker to generate Pods in arbitrary Kubernetes namespaces, including the operator namespace...

Nebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)

Summary The web UI /ui/ does not apply the per-operator CA scoping the JSON API received for GHSA-598g-h2vc-h5vg. Any authenticated non-admin operator for example, one created via self-registration or OIDC can access resources belonging to other operators. Impact A non-admin operator can: - Block...

GHSA-C6V2-3FFM-VCMC Nebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)

Summary The web UI /ui/ does not apply the per-operator CA scoping the JSON API received for GHSA-598g-h2vc-h5vg. Any authenticated non-admin operator for example, one created via self-registration or OIDC can access resources belonging to other operators. Impact A non-admin operator can: - Block...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.3.3. Vulnerability Details CVEID:CVE-2026-45447 DESCRIPTION: Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: etcd-fips, osv-scanner, reports-server, frankenphp-8.3, kubescape-server, knative-kafka-broker-fips, tekton-pipelines, kube-state-metrics, external-secrets-operator-fips, chisel-fips, trivy, external-dns, vault, knative-serving, vitess, commercial-expanso-edge, harbo...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: etcd-fips, crossplane-provider-azure-notificationhubs, crossplane-provider-azure-powerbidedicated, terraform-provider-azurerm, osv-scanner, terragrunt, reports-server, gitlab-runner, tkn, frankenphp-8.3, argo-events, kubescape-server, knative-kafka-broker-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: etcd-fips, osv-scanner, reports-server, frankenphp-8.3, kubescape-server, knative-kafka-broker-fips, tekton-pipelines, kube-state-metrics, external-secrets-operator-fips, chisel-fips, trivy, external-dns, vault, knative-serving, vitess, commercial-expanso-edge, harbo...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: etcd-fips, crossplane-provider-azure-notificationhubs, crossplane-provider-azure-powerbidedicated, terraform-provider-azurerm, osv-scanner, terragrunt, reports-server, gitlab-runner, tkn, frankenphp-8.3, argo-events, kubescape-server, knative-kafka-broker-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: etcd-fips, osv-scanner, terragrunt, reports-server, frankenphp-8.3, argo-events, kubescape-server, knative-kafka-broker-fips, pulumi-language-dotnet, pulumi-kubernetes-operator, argo-events-fips, tekton-pipelines, splunk-otel-collector, prometheus-podman-exporter-fip...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: etcd-fips, terraform-provider-azurerm, osv-scanner, terragrunt, tkn, argo-events, crossplane-provider-aws-rds-fips, crossplane-provider-aws-cloudfront-fips, external-secrets-operator-fips, chisel-fips, crossplane-provider-aws-sagemaker-fips, docker-compose-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: etcd-fips, terraform-provider-azurerm, osv-scanner, terragrunt, tkn, argo-events, crossplane-provider-aws-rds-fips, crossplane-provider-aws-cloudfront-fips, external-secrets-operator-fips, chisel-fips, crossplane-provider-aws-sagemaker-fips, docker-compose-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: etcd-fips, osv-scanner, terragrunt, reports-server, gitlab-runner, frankenphp-8.3, argo-events, kubescape-server, knative-kafka-broker-fips, pulumi-language-dotnet, pulumi-kubernetes-operator, argo-events-fips, tekton-pipelines, longhorn-manager-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: glab, minio, step-issuer, trivy, aactl, gh, falcoctl, crossplane-provider-family-azure, k9s, fulcio, mattermost, prometheus-operator, trivy-operator, crossplane-provider-aws-lambda, zot, k3s, crossplane-provider-aws-cloudformation, src, crossplane-provider-aws-iam,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: glab, minio, step-issuer, trivy, aactl, gh, falcoctl, crossplane-provider-family-azure, k9s, fulcio, mattermost, prometheus-operator, trivy-operator, zot, k3s, gitea, cert-manager, kyverno, pulumi-language-java, flux-kustomize-controller, cilium-cli, knative-serving,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: external-dns, minio, trivy, aactl, external-secrets-operator, spire-server, kots, cilium, flux-image-automation-controller, nerdctl, istio, k9s, loki, mattermost, rancher, prometheus-operator, trivy-operator, zot, k3s, snyk-cli, gitea, cert-manager,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: external-dns, minio, podman, aactl, external-secrets-operator, docker-cli-buildx, spire-server, kots, cilium, nerdctl, istio, loki, mattermost, rancher, prometheus-operator, zot, k3s, snyk-cli, cert-manager, kyverno, cilium-cli, flux, knative-serving, kaf, fscrypt,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: glab, minio, step-issuer, trivy, aactl, gh, falcoctl, crossplane-provider-family-azure, k9s, fulcio, mattermost, prometheus-operator, trivy-operator, crossplane-provider-aws-lambda, zot, k3s, crossplane-provider-aws-cloudformation, src, crossplane-provider-aws-iam,...

CVE-2026-9640

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...