133 matches found
PT-2025-52694
Name of the Vulnerable Software and Affected Versions Cobian Reflector version 0.9.93 RC1 Description The software contains a denial of service issue that allows attackers to crash the application. This occurs by overflowing the password input field. An attacker can paste a large 8000-byte buffer...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: lvm-driver-fips, newrelic-nri-kube-events-fips, secrets-store-csi-driver-provider-azure, kind, aws-load-balancer-controller-fips, fluent-operator-fips, prometheus-beat-exporter-fips, consul-k8s-fips, prometheus-operator, karpenter, ctop,...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: lvm-driver-fips, newrelic-nri-kube-events-fips, secrets-store-csi-driver-provider-azure, kind, aws-load-balancer-controller-fips, fluent-operator-fips, prometheus-beat-exporter-fips, consul-k8s-fips, prometheus-operator, karpenter, ctop,...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: portieris, kube-fluentd-operator, supercronic, kapp-controller, kuberlr, grafana-image-renderer, rabbitmq-default-user-credential-updater, secrets-store-csi-driver-provider-gcp, knative-client, sops, nri-discovery-kubernetes, helm-docs, gitaly, gitleaks,...
EUVD-2018-6488
Malware in sbrugna...
EUVD-2012-2558
Malware in sbrugna...
CVE-2025-9708 vulnerabilities
Vulnerabilities for packages: kubernetes-reflector...
GHSA-W7R3-MGWF-4MQQ vulnerabilities
Vulnerabilities for packages: kubernetes-reflector...
CVE-2025-9708 vulnerabilities
Vulnerabilities for packages: kubernetes-reflector...
GHSA-W7R3-MGWF-4MQQ vulnerabilities
Vulnerabilities for packages: kubernetes-reflector...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: buf, secrets-store-csi-driver-provider-azure, step-issuer, fixuid, kind, aws-load-balancer-controller-fips, fq, kube-conformance, consul-k8s-fips, prometheus-operator, karpenter, kubernetes-csi-external-snapshotter, gops, opentelemetry-collector, memcached-exporter,...
GHSA-29WX-VH33-7X7R vulnerabilities
Vulnerabilities for packages: minio-operator, openbao, cosign, nuclei, boring-registry, docker, falcoctl, flux-image-reflector-controller, chartmuseum, pulumi-kubernetes-operator, crossplane-provider-azure-storage, argo-events, flux-source-controller, flux-notification-controller, crossplane, kot...
CVE-2024-51744 vulnerabilities
Vulnerabilities for packages: minio-operator, openbao, cosign, nuclei, boring-registry, docker, falcoctl, flux-image-reflector-controller, chartmuseum, pulumi-kubernetes-operator, crossplane-provider-azure-storage, argo-events, flux-source-controller, flux-notification-controller, crossplane, kot...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: cosign, nuclei, cortex, boring-registry, flux-image-reflector-controller, falcoctl, fulcio, rekor, zot, grafana-mimir, flux-source-controller, argo-events, airflow, terragrunt, fluent-bit-plugin-loki, tekton-chains, argo-workflows, hugo-extended, py3-azure-identity,...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: falcoctl, skopeo, cadvisor, kubescape, policy-controller-fips, vexctl, kots, flux, goreleaser, flux-helm-controller, buildkitd, kpt, argo-workflows, k8sgpt, slsa-verifier, ctop, policy-controller, helm, dagger, ko-fips, zot, helm-fips, trivy, cadvisor-fips,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: falcoctl, skopeo, cadvisor, kubescape, policy-controller-fips, vexctl, kots, flux, goreleaser, flux-helm-controller, buildkitd, kpt, argo-workflows, k8sgpt, slsa-verifier, ctop, policy-controller, helm, dagger, ko-fips, zot, helm-fips, trivy, cadvisor-fips,...
GHSA-6758-979H-249X capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount name
Summary A bug in the RoleBinding reflector used by capsule-proxy gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. Details - Tenant solar, owned by a ServiceAccount named tenant-owner in the Namespace solar - Tenant wind, owne...
CVE-2023-46254
capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by capsule-proxy gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. For example consider two tenants solar...
PT-2023-29934 · Unknown · Capsule-Proxy
Name of the Vulnerable Software and Affected Versions: capsule-proxy versions prior to 0.4.5 Description: A bug in the RoleBinding reflector used by capsule-proxy gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. This introduc...