Kubernetes security vulnerabilities
Kubernetes and cluster-adjacent CVEs with source attribution.
Built for Cloud-native teams.
147 public records · 12 security-fix timeline events.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 3
- High 4
- Medium 3
- Low 2
2026-07-2112 issues2026-10-18
Known exploited
View all known exploitedRecently published
Browse catalog- Critical9.9KEDA is a Kubernetes-based Event Driven Autoscaling component.Check if you run itEPSS 0.64%Oct 14, 2026
- Critical9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.72%Oct 13, 2026
- High7.7A flaw was found in the OpenShift console.Check if you run itEPSS 0.21%Oct 12, 2026
- Medium6.1A flaw was found in oauth-proxy.Check if you run itEPSS 0.25%Oct 1, 2026
- High7.1Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.14%Sep 27, 2026
- Medium5.1Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0.Check if you run itEPSS 0.16%Sep 27, 2026
- High8.5Edgelesssys Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.21%Sep 27, 2026
- Medium6.9Contrast is a Kubernetes runtime for confidential containers.Check if you run itEPSS 0.07%Sep 27, 2026
- High7.5A flaw was found in the OpenShift console.Check if you run itEPSS 0.51%Sep 23, 2026
- Critical9.3A flaw was found in the OpenShift console.Check if you run itEPSS 0.82%Sep 18, 2026