GO-2026-4942 vulnerabilities

Vulnerabilities for packages: zot, portieris, kots, envoy-gateway, gitness, argocd-image-updater...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris (a Kubernetes admission controller for image policy enforcement) is vulnerable to image policy bypass in versions prior to v0.14.3 . The root cause is improper authorization of pod ownerReferences : when a pod contains a fabricated ownerReference whose Kind matches a supported contr...

CVE-2026-18544 Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544 Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

EUVD-2026-62851

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

CVE-2026-18544: Missing Authorization

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

PT-2026-78689

Name of the Vulnerable Software and Affected Versions IBM Portieris versions 0.5.0 through 0.14.2 Description Improper authorization of pod owner references allows a remote authenticated attacker to bypass image policy enforcement. Recommendations Update IBM Portieris to a version later than 0.14...

Security Bulletin: Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference ( CVE-2026-18544 )

Summary IBM Portieris skips image policy enforcement when a pod contains a fabricated ownerReference whose Kind matches one of the supported controller types. This allows bypassing of image security policies in a namespace when Portieris is the enforcing Kubernetes admission controller...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: zot, portieris-fips, envoy-gateway, portieris, gitlab-rails-ce-fips, gitlab-rails-ce, argocd-image-updater, gitness, envoy-gateway-fips, kots, argocd-image-updater-fips...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: zot, portieris-fips, envoy-gateway, portieris, gitlab-rails-ce-fips, gitlab-rails-ce, argocd-image-updater, gitness, envoy-gateway-fips, kots, argocd-image-updater-fips...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler-operator, nsc-fips, promxy, cert-manager-cmctl, rancher-telemetry, terraform-provider-sendgrid, multus-cni-fips, wave-fips, helm-set-status, fscrypt, podinfo, docker-cli-buildx, timescaledb-tune, ytt-fips, atlantis, kubevela,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler-operator, nsc-fips, promxy, cert-manager-cmctl, rancher-telemetry, terraform-provider-sendgrid, multus-cni-fips, wave-fips, helm-set-status, fscrypt, podinfo, docker-cli-buildx, timescaledb-tune, ytt-fips, atlantis, kubevela,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: promxy, neuvector-fips, cert-manager-cmctl, terraform-provider-sendgrid, crossplane-provider-azure-sql, fscrypt, opentelemetry-collector-contrib-fips, docker-cli-buildx, atlantis, kubevela, crossplane-provider-gcp, dynamic-localpv-provisioner-fips, argo-rollouts,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: zot, portieris, kots, envoy-gateway, gitness, argocd-image-updater...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: zot, portieris, kots, envoy-gateway, gitness, argocd-image-updater...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: tflint, knative-eventing, litestream, kubernetes-csi-node-driver-registrar, wuzz, kubernetes-event-exporter, kubernetes-dashboard-auth, kserve-rest-proxy, logstash-exporter, kubernetes-ingress-defaultbackend, rancher-agent, pdfcpu, influx, kuberlr,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: tflint, knative-eventing, litestream, kubernetes-csi-node-driver-registrar, wuzz, kubernetes-event-exporter, kubernetes-dashboard-auth, kserve-rest-proxy, logstash-exporter, kubernetes-ingress-defaultbackend, rancher-agent, pdfcpu, influx, kuberlr, kustomize, yq,...