Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Mar 11, 2026
- Medium4.3Kubewarden is a policy engine for Kubernetes.Mar 10, 2026
- High8.8A security issue was discovered in ingress-nginx where the Ingress annotation can be used to inject configuration into nginx.Mar 9, 2026
- High8.2Zarf is an Airgap Native Packager Manager for Kubernetes.Mar 6, 2026
- High8.5Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes.Mar 4, 2026
- Medium6.5A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to…EPSS 0.5%Mar 4, 2026
- High8.2kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster.Feb 27, 2026
- High7.6Kruise provides automated management of large-scale applications on Kubernetes.Feb 25, 2026
- High8.1Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Feb 21, 2026
- Medium5.9Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Feb 20, 2026
- Unknowningress-nginx auth-proxy-set-headers nginx configuration injectionEPSS 0.5%Feb 6, 2026
- Unknowningress-nginx Admission Controller denial of serviceFeb 2, 2026
- Unknowningress-nginx auth-url protection bypassFeb 2, 2026
- Unknowningress-nginx rules.http.paths.path nginx configuration injectionFeb 2, 2026
- Unknowningress-nginx auth-method nginx configuration injectionEPSS 0.5%Feb 2, 2026
- UnknownCredential caching in Headlamp with Helm enabledDec 17, 2025
- High7.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.EPSS 0.7%Dec 9, 2025
- Medium5.8A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass.EPSS 0.4%Nov 30, 2025
- UnknownKubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacksEPSS 0.3%Sep 15, 2025
- Unknownsecrets-store-sync-controller discloses service account tokens in logsEPSS 0.2%Sep 4, 2025
- UnknownNodes can delete themselves by adding an OwnerReferenceEPSS 0.6%Aug 11, 2025
- UnknownVM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not overrideEPSS 0.4%Jul 21, 2025
- UnknownNodes can bypass dynamic resource allocation authorization checksEPSS 0.8%Jun 6, 2025
- High7.5A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding.EPSS 0.5%Mar 31, 2025
- Unknowningress-nginx admission controller RCE escalationEPSS 99.4%Mar 23, 2025