santamon

Santamon Lightweight macOS detection sidecar for Santa that evaluates Endpoint Security telemetry locally with CEL rules and forwards only matched detection signals to a backend server. Experimental. Built for home labs and small fleets. Early release – expect bugs and API changes. What It Does...

pii-shield

PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. Same name, different projects. This is...

tarian

Tarian We want to maintain this as open-source to fight against the attacks on our favorite Kubernetes ecosystem. We can fight threats together as a community, by continuous contribution. Protect your Applications running on Kubernetes from malicious attacks by pre-registering your source code...

CVE-2026-20253

Splunk Enterprise — Laboratorio de Entrenamiento CVE-2026-20253 Splunk Enterprise 10.2.3 · sidecar de recuperación PostgreSQL · CWE-306 Autenticación faltante para función crítica Una reproducción autorizada y autocontenida que modela el aviso real para educación defensiva. No incluye código...

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 Splunk Pre-Auth RCE Splunk Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to access the /v1/postgres/recovery/backup endpoint of PostgreSQL Sidecar Service to verify if it is accessible or not: 400 response - probably...

CLEANSTART-2026-PH11243 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels

Security vulnerability affects the k8s-sidecar package. pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels...

CVE-2026-20253

🚨 CVE-2026-20253 - Vulnerabilidad Crítica de Creación de Archivos No Autenticada en Splunk Enterprise Vulnerabilidad de creación y truncamiento arbitrario de archivos no autenticada que afecta a Splunk Enterprise y Splunk Cloud Platform. 📖 Resumen Ejecutivo CVE-2026-20253 es una vulnerabilidad...

CVE-2026-20253

CVE-2026-20253 — Splunk Enterprise Pre-Auth RCE Lab Unauthenticated Arbitrary File Creation and Truncation via PostgreSQL Sidecar CVSS 9.8 · Critical · CWE-306 · Actively exploited CISA KEV ⚠️ Disclaimer This repository is intended strictly for educational and authorised security research purposes...

bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678 — RCE no autenticado en MindsDB Minds Platform / MindsHub Cowork PoC para CVE-2026-73678 CVSS 3.1 10.0 Crítico , AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Análisis completo: www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ El sidecar...

CVE-2026-20253

Entorno de Laboratorio CVE-2026-20253 RCE Pre-Auth en Splunk Enterprise a través del Servicio Sidecar de PostgreSQL | ---|--- CVE| CVE-2026-20253 CVSS| 9.8 Crítico Tipo| Ejecución Remota de Código No Autenticada CWE| CWE-306: Autenticación Faltante para Función Crítica Producto| Splunk Enterprise...

alpr-dashboard-patches

Parches de tiempo de ejecución para ALPR Dashboard Dos parches de integración directa para el proyecto Docker algertc/alpr-dashboard. Ambos se pueden implementar sin modificar ni reconstruir la imagen original. Qué hay aquí logger-fix/ — registrador asíncrono + limitación de limpieza Reemplaza el...

MobSF_AI

MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...

CLEANSTART-2026-ZF37263 Security fix for CVE-2024-35195 applied in: k8s-sidecar 1.25.2-r0, py3-requests 2.32.3-r0, py3.14-requests 2.32.3-r0

CVE-2024-35195 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK32867 Security fix for CVE-2026-1703 applied in: k8s-sidecar 1.25.2-r0, kubernetes-csi-driver-nfs-fips 4.13.0-r0, python3 3.11.14-r0, python3 3.12.12-r0

CVE-2026-1703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RV30467 Security fix for CVE-2026-44431 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r3, airflow-3 3.2.0-r0, apache-superset 5.0.0-r7, az 2.83.0-r1, az 2.84.0-r2, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, jupyterhub-k8s-hub 4.3.2-r3, jupyterhub-k8s-hub 4.3.3-r0, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, py3-jupyterhub 5.4.4-r0, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-44431 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WH98389 Security fix for CVE-2026-44432 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r3, airflow-3 3.2.0-r0, apache-superset 5.0.0-r7, az 2.83.0-r1, az 2.84.0-r2, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, jupyterhub-k8s-hub 4.3.2-r3, jupyterhub-k8s-hub 4.3.3-r0, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, py3-jupyterhub 5.4.4-r0, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-44432 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TQ24260 Security fix for CVE-2024-47081 applied in: k8s-sidecar 1.25.2-r0

Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BZ71423 Security fix for CVE-2025-8869 applied in: k8s-sidecar 1.25.2-r0

Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZI04041 Security fix for CVE-2026-6357 applied in: k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, python3 3.12.13-r0

CVE-2026-6357 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WY69230 Security fix for CVE-2026-45409 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.2.1-r3, apache-superset 5.0.0-r7, apache-superset 6.0.0-r5, az 2.83.0-r1, az 2.84.0-r2, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r2, miniforge3 26.1.0.0-r2, miniforge3 26.1.1.0-r1, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-45409 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...