Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.4Helm is a package manager for Charts for Kubernetes.Apr 9, 2026
- Critical9.1kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads.Apr 8, 2026
- Medium5.5A flaw was found in Red Hat Quay's Proxy Cache configuration feature.Apr 8, 2026
- High8.8A flaw was found in Red Hat Quay's handling of resumable container image layer uploads.Apr 8, 2026
- High7.4A flaw was found in Red Hat Quay's container image upload process.Apr 8, 2026
- Medium6.5A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift.Apr 8, 2026
- Medium5.3A flaw was found in the OpenShift Mirror Registry.Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images.Apr 8, 2026
- Medium6.7A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images.Apr 8, 2026
- Critical9.1Podman Desktop is a graphical tool for developing on containers and Kubernetes.Apr 7, 2026
- High8.2A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM).Apr 7, 2026
- High7.1Antrea is a Kubernetes networking solution intended to be Kubernetes native.Apr 6, 2026
- High8.8KubeAI is an AI inference operator for kubernetes.Apr 6, 2026
- Critical9.8Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.Apr 3, 2026
- High8.8Flannel is a network fabric for containers, designed for Kubernetes.Mar 27, 2026
- High8.1A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator.Mar 26, 2026
- Critical9.6Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Mar 24, 2026
- Medium6.5Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Mar 20, 2026
- High8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.Mar 19, 2026
- High7.1Kube-router is a turnkey solution for Kubernetes networking.Mar 18, 2026
- Medium6.5A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated.Mar 17, 2026
- Medium6.4A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images.Mar 13, 2026
- Medium4.8Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF.Mar 12, 2026
- Medium6.8HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication.Mar 12, 2026
- High8.9Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Mar 11, 2026