GO-2026-4942 vulnerabilities

Vulnerabilities for packages: gitness, zot, portieris, kots, argocd-image-updater, envoy-gateway...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris (a Kubernetes admission controller for image policy enforcement) is vulnerable to image policy bypass in versions prior to v0.14.3 . The root cause is improper authorization of pod ownerReferences : when a pod contains a fabricated ownerReference whose Kind matches a supported contr...

CVE-2026-18544 Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

EUVD-2026-62851

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544 Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

PT-2026-78689

Name of the Vulnerable Software and Affected Versions IBM Portieris versions 0.5.0 through 0.14.2 Description Improper authorization of pod owner references allows a remote authenticated attacker to bypass image policy enforcement. Recommendations Update IBM Portieris to a version later than 0.14...

CVE-2026-18544: Missing Authorization

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

Security Bulletin: Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference ( CVE-2026-18544 )

Summary IBM Portieris skips image policy enforcement when a pod contains a fabricated ownerReference whose Kind matches one of the supported controller types. This allows bypassing of image security policies in a namespace when Portieris is the enforcing Kubernetes admission controller...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: portieris-fips, portieris, argocd-image-updater-fips, gitness, kots, envoy-gateway-fips, zot, gitlab-rails-ce-fips, envoy-gateway, gitlab-rails-ce, argocd-image-updater...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: portieris-fips, portieris, argocd-image-updater-fips, gitness, kots, envoy-gateway-fips, zot, gitlab-rails-ce-fips, envoy-gateway, gitlab-rails-ce, argocd-image-updater...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, runc, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, teleport, terraform-provider-sendgrid-fips, terraform-provider-kubernetes, harbor-registry, cert-manager-cmctl,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: temporal-server, argo-cd, cosign-fips, crossplane-provider-aws-kms, seaweedfs, helm-operator, kwok, secrets-store-csi-driver, rancher-fleet, terraform-provider-sendgrid-fips, harbor-registry, cert-manager-cmctl, portieris-fips, etcd-fips, trillian-fips, zot,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: gitness, zot, portieris, kots, argocd-image-updater, envoy-gateway...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitness, zot, portieris, kots, argocd-image-updater, envoy-gateway...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: tetragon, terraform-provider-pagerduty, cadvisor, crossplane-provider-aws-firehose, newrelic-infrastructure-agent, azurefile-csi, wave, tkn, spqr, vt-cli, oras, k8sgpt, rootlesskit, datadog-agent, volume-modifier-for-k8s, argo-rollouts, opentelemetry-collector,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: tetragon, terraform-provider-pagerduty, cadvisor, crossplane-provider-aws-firehose, newrelic-infrastructure-agent, azurefile-csi, wave, tkn, spqr, vt-cli, oras, k8sgpt, rootlesskit, datadog-agent, volume-modifier-for-k8s, argo-rollouts, opentelemetry-collector,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: tetragon, terraform-provider-pagerduty, cadvisor, crossplane-provider-aws-firehose, newrelic-infrastructure-agent, azurefile-csi, wave, tkn, spqr, vt-cli, oras, k8sgpt, rootlesskit, datadog-agent, volume-modifier-for-k8s, argo-rollouts, opentelemetry-collector,...