Cilium 安全漏洞

Cilium is an open-source software developed by Cilium contributors. It is used to provide and transparently protect network connections and load balancing between application workloads, such as application containers or processes. Versions of Cilium from 1.18.0 to 1.18.5 contain security...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the handler process. An attacker can trigger unauthorized WASM module execution in the controller context by sending crafted AdmissionReview requests directly to webhook endpoints from an...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: cue, local-static-provisioner, wolfictl, vault-k8s, k8sgpt-operator, grafana-alloy, juicefs, spicedb-operator, mongodb-kubernetes-operator, kaf, nri-redis, rancher-fleet, amass, timoni, db-operator, ferretdb, rancher-agent, gcsfuse, yunikorn-k8shim, spark-operator,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: cue, gitea, local-static-provisioner, wolfictl, xcaddy, vault-k8s, k8sgpt-operator, grafana-alloy, juicefs, yq, spicedb-operator, mongodb-kubernetes-operator, kaf, sbom-convert, nri-redis, rancher-fleet, amass, timoni, db-operator, ferretdb, fzf, rancher-agent,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: cue, local-static-provisioner, wolfictl, vault-k8s, k8sgpt-operator, grafana-alloy, juicefs, spicedb-operator, mongodb-kubernetes-operator, kaf, nri-redis, rancher-fleet, amass, timoni, db-operator, ferretdb, rancher-agent, gcsfuse, yunikorn-k8shim, spark-operator,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: controller-gen, docker-credential-acr-env-fips, cert-manager-csi-driver, k6-fips, nri-redis-fips, verticadb-operator-fips, cadvisor, azcopy-fips, falco-no-driver, consul-k8s, crossplane-provider-aws-kms, ratify-fips, custom-pod-autoscaler-operator-fips, restic-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: controller-gen, docker-credential-acr-env-fips, cert-manager-csi-driver, k6-fips, nri-redis-fips, verticadb-operator-fips, cadvisor, azcopy-fips, falco-no-driver, consul-k8s, crossplane-provider-aws-kms, ratify-fips, custom-pod-autoscaler-operator-fips, restic-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: controller-gen, docker-credential-acr-env-fips, cert-manager-csi-driver, k6-fips, nri-redis-fips, verticadb-operator-fips, cadvisor, azcopy-fips, falco-no-driver, consul-k8s, crossplane-provider-aws-kms, ratify-fips, custom-pod-autoscaler-operator-fips, restic-fips,...

SUSE CVE-2026-24514

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

GHSA-2PF9-VR92-6H3V ingress-nginx vulnerable to Allocation of Resources Without Limits or Throttling

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

PT-2026-6347

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

CVE-2026-24514

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

CVE-2026-24514 ingress-nginx Admission Controller denial of service

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

CVE-2026-24514 ingress-nginx Admission Controller denial of service

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

CVE-2026-24514 ingress-nginx Admission Controller denial of service

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

CVE-2026-24514

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

CLEANSTART-2026-IB84500 security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion

Multiple security vulnerabilities affect the kubernetes-fips package. A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. See references for individual vulnerability details...

CLEANSTART-2026-UM63521 Within HostnameError

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2021-28708

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

CVE-2021-28704

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...