Coverage tagged "Kubernetes".
Posted by Tabitha Sable on Nov 05 Hello Kubernetes Community, A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service…
This article is published for educational purposes only, to raise awareness among information security professionals. The research was part of an official bug bounty program on a major platform. We…
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
arXiv:2610.27332v1 Announce Type: new Abstract: This article presents a Distributed Key Management System (DKMS) that provisions quantum-safe symmetric encryption keys to applications across a…
The JFrog Security Research team identified malicious code in `litellm` 1.107.0, a widely used Python interface and proxy for large language model providers. The payload wheels are a functional copy…
Enable native runtime protection for GKE in just one click. The Wiz Runtime Sensor add-on now automates deployment and credential management while delivering predictable, kernel-level eBPF threat…
Serial Number: AV26-1061 Date: October 19, 2026 As of October 19, 2026, Red Hat is affected by vulnerabilities in the following products: Fast Datapath for RHEL 10/8/9 All versions ManageIQ All…
Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.
netcoreunbxd.com Netcore Unbxd AI product-discovery platform for enterprise e-commerce: smart site search, 1:1 personalization, recommendations, visual intelligence ("Complete the Look"), catalog…
Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use…
GitLab heeft kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE), specifiek in versies voorafgaand aan 19.2.8, 19.3.5 en 19.4.2. De kwetsbaarheden zijn aanwezig in…
Posted by Nebojša Jaćović on Oct 12 Hi, I'm disclosing a vulnerability in kubernetes/cloud-provider-gcp that I reported to Google Cloud VRP on 2026-06-14 (Issue #523808414). The 90-day disclosure…
On October 8, 2026, we released versions 19.4.2, 19.3.4, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly…
Posted by Andrea Cosentino on Oct 09 Severity: CVSS 3.1: 8.8 (high) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected versions: - Apache Camel Karavan 4.0.0 before 4.22.1 Description: Improper…
Posted by Wenjun Ruan on Oct 07 Severity: important Affected versions: - Apache DolphinScheduler 3.1.0 before 3.4.3 Description: An authorization vulnerability in Apache DolphinScheduler allows…
aws-auth ConfigMap Deprecated – EKS Access Entries Are the Way Forward October 7, 2026 Keegan Justis BLOG 5 min. If you’ve been running Amazon Web Services (AWS) Elastic Kubernetes Service (EKS)…
Posted by Wilfred Spiegelenburg on Oct 07 Severity: CVSS 4.0: 2.0 (low) CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Affected versions: - Apache YuniKorn before 1.10.0 Description…
