1254 matches found
EUVD-2026-60361
A flaw was found in search-v2-operator. This component's search-serviceaccount has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve...
CVE-2026-72656
A flaw was found in Elasticsearch. An authenticated user, by submitting a specially crafted ES|QL query, could trigger an unbounded allocation of heap memory. This excessive memory consumption exhausts the available resources on the receiving node, leading to a denial of service DoS condition whe...
CVE-2026-15218
The maas-api and maas-controller ServiceAccounts in Red Hat OpenShift AI (Models-as-a-Service) are granted excessive cluster-wide permissions. An attacker who compromises these identities via RCE or a malicious pod can escalate to full cluster admin by creating ClusterRoleBindings or read all clu...
CVE-2026-15218 Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation
A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identity of these ServiceAccounts, either through a remote code...
BIT-MONGODB-2026-13059 Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass
An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...
PT-2026-76762
Name of the Vulnerable Software and Affected Versions search-v2-operator affected versions not specified Description A flaw exists in the search-v2-operator where the search-serviceaccount is assigned overly broad permissions. This allows for the impersonation of users and groups across the entir...
GHSA-5GJX-96WQ-C8R2 vulnerabilities
Vulnerabilities for packages: helm...
GO-2025-3690 vulnerabilities
Vulnerabilities for packages: seaweedfs-operator, seaweedfs-operator-fips...
GO-2024-2536 vulnerabilities
Vulnerabilities for packages: rancher-webhook...
GO-2026-5602 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2025-3994 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2024-3002 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2024-2611 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-elasticache, kaniko, metrics-server, certificate-transparency, actions-runner-controller, secrets-store-csi-driver-provider-aws, newrelic-nri-kube-events, flux-kustomize-controller, frp, sigstore-scaffolding, kubeflow, grpc-health-probe,...
GO-2025-3521 vulnerabilities
Vulnerabilities for packages: vcluster, kubernetes...
GO-2020-0012 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2026-5602 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2026-4736 vulnerabilities
Vulnerabilities for packages: cilium-cli, kube-vip...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: fulcio, dex, restic, opentelemetry-collector-contrib, terragrunt, guac, temporal, rqlite, spire-server, k3d, opa, k3s, spegel, conftest, kubernetes-csi-driver-hostpath, grafana-mimir, kubernetes-csi-external-provisioner, cert-manager-cmctl, terraform-docs, tflint,...
GO-2026-5543 vulnerabilities
Vulnerabilities for packages: dex, external-secrets-operator, cert-manager-istio-csr, juicefs, cert-manager-csi-driver, rclone, rancher, xeol, kyverno, percona-server-mongodb-operator, spqr, telegraf, trufflehog, cert-manager-cmctl, k6, rancher-webhook, nuclei, rancher-agent, harbor, bento, frp,...