GO-2026-4942 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, envoy-gateway, gitness, portieris, kots, zot...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris (a Kubernetes admission controller for image policy enforcement) is vulnerable to image policy bypass in versions prior to v0.14.3 . The root cause is improper authorization of pod ownerReferences : when a pod contains a fabricated ownerReference whose Kind matches a supported contr...

EUVD-2026-62851

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544 Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

PT-2026-78689

Name of the Vulnerable Software and Affected Versions IBM Portieris versions 0.5.0 through 0.14.2 Description Improper authorization of pod owner references allows a remote authenticated attacker to bypass image policy enforcement. Recommendations Update IBM Portieris to a version later than 0.14...

Security Bulletin: Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference ( CVE-2026-18544 )

Summary IBM Portieris skips image policy enforcement when a pod contains a fabricated ownerReference whose Kind matches one of the supported controller types. This allows bypassing of image security policies in a namespace when Portieris is the enforcing Kubernetes admission controller...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, portieris, argocd-image-updater-fips, envoy-gateway, kots, envoy-gateway-fips, gitlab-rails-ce-fips, portieris-fips, gitness, zot, argocd-image-updater...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, portieris, argocd-image-updater-fips, envoy-gateway, kots, envoy-gateway-fips, gitlab-rails-ce-fips, portieris-fips, gitness, zot, argocd-image-updater...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, distribution-fips, timescaledb-tune, src-fingerprint-fips, direnv, grafana-pyroscope, gpu-operator-fips, mongodb-kubernetes-operator-fips, sonobuoy, govulncheck, secrets-store-csi-driver-provider-gcp, juicefs, pgwatch,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, distribution-fips, timescaledb-tune, src-fingerprint-fips, direnv, grafana-pyroscope, gpu-operator-fips, mongodb-kubernetes-operator-fips, sonobuoy, govulncheck, secrets-store-csi-driver-provider-gcp, juicefs, pgwatch,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: flux-source-controller, distribution-fips, grpc-health-probe, mailpit, src-fingerprint-fips, tekton-chains, azcopy, secrets-store-csi-driver-provider-gcp, velero-fips, actions-runner-controller, kyverno-notation-aws-fips, git-lfs-fips, eksctl,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, envoy-gateway, gitness, portieris, kots, zot...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, envoy-gateway, gitness, portieris, kots, zot...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: stakater-reloader, nvidia-container-toolkit, rancher-system-upgrade-controller, smokescreen, opencost, kubernetes-dashboard-auth, migrate, helm-docs, aws-signer-notation-plugin, cluster-api, kustomize, sftpgo-plugin-eventstore, opentelemetry-collector-contrib,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: stakater-reloader, nvidia-container-toolkit, rancher-system-upgrade-controller, smokescreen, opencost, kubernetes-dashboard-auth, migrate, helm-docs, aws-signer-notation-plugin, cluster-api, kustomize, sftpgo-plugin-eventstore, opentelemetry-collector-contrib,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: stakater-reloader, nvidia-container-toolkit, rancher-system-upgrade-controller, smokescreen, opencost, kubernetes-dashboard-auth, migrate, helm-docs, aws-signer-notation-plugin, cluster-api, kustomize, sftpgo-plugin-eventstore, opentelemetry-collector-contrib, xcaddy...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: stakater-reloader, nvidia-container-toolkit, rancher-system-upgrade-controller, smokescreen, opencost, kubernetes-dashboard-auth, migrate, helm-docs, aws-signer-notation-plugin, cluster-api, kustomize, sftpgo-plugin-eventstore, opentelemetry-collector-contrib, xcaddy...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, amazon-cloudwatch-agent-operator, kpt, undock, promxy, kubeflow-katib, newrelic-infrastructure-agent, skaffold, docker-credential-gcr, k3s, lazydocker, ctop, rancher-machine, crossplane, xeol, falcoctl, cluster-api-helm-controller, openbao,...