tetragon

Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...

tetragon-dirtyfrag

tetragon-dirtyfrag Blocking the DirtyFrag Linux privilege-escalation chain CVE-2026-43284 / CVE-2026-43500 at runtime with a Cilium Tetragon TracingPolicy. The policy SIGKILLs the public proof-of-concept at its socket-setup step, before it reaches the page-cache write that would give it root. Wha...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: gatekeeper, cloud-provider-azure, descheduler, opentelemetry-operator, cert-manager-istio-csr, flux-kustomize-controller, tkn, kyverno-notation-aws, kube-metrics-adapter, kubernetes-csi-external-attacher, kwok, kapp-controller, gitlab-kas, kubescape, hubble-ui,...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, dockerize, gogatekeeper, cloud-provider-azure, descheduler, tfsec, crossplane-provider-aws-s3, direnv, buildah, terragrunt, kube-metrics-adapter, pguser, volume-modifier-for-k8s, falcosidekick, xeol, nri-haproxy,...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, dockerize, gogatekeeper, cloud-provider-azure, descheduler, tfsec, crossplane-provider-aws-s3, direnv, buildah, terragrunt, kube-metrics-adapter, pguser, volume-modifier-for-k8s, falcosidekick, xeol, nri-haproxy,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: gatekeeper, cloud-provider-azure, descheduler, opentelemetry-operator, cert-manager-istio-csr, flux-kustomize-controller, tkn, kyverno-notation-aws, kube-metrics-adapter, kubernetes-csi-external-attacher, kwok, kapp-controller, gitlab-kas, kubescape, hubble-ui,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, terraform-provider-aws-fips, dataplaneapi-fips, secrets-store-csi-driver-provider-gcp, temporal-server, fluent-operator, velero-plugin-for-gcp, cluster-api-azure-controller, external-secrets-fips,...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, terraform-provider-aws-fips, dataplaneapi-fips, secrets-store-csi-driver-provider-gcp, temporal-server, fluent-operator, velero-plugin-for-gcp, cluster-api-azure-controller, external-secrets-fips,...