GO-2026-4942 vulnerabilities

Vulnerabilities for packages: gitness, zot, kots, portieris, envoy-gateway, argocd-image-updater...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris (a Kubernetes admission controller for image policy enforcement) is vulnerable to image policy bypass in versions prior to v0.14.3 . The root cause is improper authorization of pod ownerReferences : when a pod contains a fabricated ownerReference whose Kind matches a supported contr...

EUVD-2026-62851

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544 Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

PT-2026-78689

Name of the Vulnerable Software and Affected Versions IBM Portieris versions 0.5.0 through 0.14.2 Description Improper authorization of pod owner references allows a remote authenticated attacker to bypass image policy enforcement. Recommendations Update IBM Portieris to a version later than 0.14...

Security Bulletin: Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference ( CVE-2026-18544 )

Summary IBM Portieris skips image policy enforcement when a pod contains a fabricated ownerReference whose Kind matches one of the supported controller types. This allows bypassing of image security policies in a namespace when Portieris is the enforcing Kubernetes admission controller...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, gitlab-rails-ce-fips, zot, portieris, gitness, argocd-image-updater, envoy-gateway-fips, gitlab-rails-ce, portieris-fips, envoy-gateway, kots...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, gitlab-rails-ce-fips, zot, portieris, gitness, argocd-image-updater, envoy-gateway-fips, gitlab-rails-ce, portieris-fips, envoy-gateway, kots...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, cert-exporter-fips, lvm-driver-fips, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, wazero-fips, ipfs-cluster-fips, kustomize, container-object-storage-interface, istio,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, cert-exporter-fips, lvm-driver-fips, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, wazero-fips, ipfs-cluster-fips, kustomize, container-object-storage-interface, istio,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, cert-exporter-fips, neuvector, boring-registry, gcp-compute-persistent-disk-csi-driver, tekton-chains-fips, nfs-subdir-external-provisioner-fips, helm-operator, openbao, wolfictl, docker-compose, neuvector-sigstore-interface, vexctl, ksop...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitness, zot, kots, portieris, envoy-gateway, argocd-image-updater...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: gitness, zot, kots, portieris, envoy-gateway, argocd-image-updater...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, tflint, nsc, supercronic, external-dns, crossplane-provider-aws-s3, kserve, kubernetes-dashboard-metrics-scraper, spicedb, metrics-server, php-fpmexporter, rook, prometheus-alertmanager, kubernetes-csi-driver-nfs, yq,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, tflint, nsc, supercronic, external-dns, crossplane-provider-aws-s3, kserve, kubernetes-dashboard-metrics-scraper, spicedb, metrics-server, php-fpmexporter, rook, prometheus-alertmanager, kubernetes-csi-driver-nfs, yq,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, tflint, nsc, supercronic, external-dns, crossplane-provider-aws-s3, kserve, kubernetes-dashboard-metrics-scraper, spicedb, metrics-server, php-fpmexporter, rook, prometheus-alertmanager, kubernetes-csi-driver-nfs, yq,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, tflint, nsc, supercronic, external-dns, crossplane-provider-aws-s3, kserve, kubernetes-dashboard-metrics-scraper, spicedb, metrics-server, php-fpmexporter, rook, prometheus-alertmanager, kubernetes-csi-driver-nfs, yq,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: k3s, bento, ctop, kubeflow-katib, rancher-agent, lazydocker, skaffold, opentelemetry-operator, harbor-scanner-trivy, undock, newrelic-infrastructure-agent, amazon-cloudwatch-agent-operator, prometheus, k3d, cluster-api-helm-controller, falcoctl, openbao, xeol, promxy...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: rancher-agent, cluster-api-helm-controller-fips, cluster-api, skaffold, cluster-api-helm-controller, xeol, gitlab-rails-ce, promxy-fips, bento, gatekeeper, openbao, amazon-cloudwatch-agent-operator-fips, traefik, aactl, harbor, vault, k3d,...