mostafahussein / kubernetes-sec-alert

Track Kubernetes CVEs by native GitHub notifications!

mostafahussein/kubernetes-sec-alert Issues

CVE-2018-1002105: proxy request handling in kube-apiserver can leave vulnerable TCP connections
Updated 7 months ago7
CVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes
Updated 8 months ago
CVE-2023-3893: Insufficient input sanitization on kubernetes-csi-proxy leads to privilege escalation
Updated 8 months ago
CVE-2023-3955: Insufficient input sanitization on Windows nodes leads to privilege escalation
Updated 8 months ago
CVE-2023-3676: Insufficient input sanitization on Windows nodes leads to privilege escalation
Updated 8 months ago
CVE-2018-1002100: Kubectl copy doesn't check for paths outside of it's destination directory.
Updated 9 months ago
CVE-2023-2431: Bypass of seccomp profile enforcement
Updated a year ago
CVE-2023-2878: secrets-store-csi-driver discloses service account tokens in logs
Updated a year ago
CVE-2022-3294: Node address isn't always verified when proxying
Updated 2 years ago
CVE-2022-3162: Unauthorized read of Custom Resources
Updated 2 years ago
CVE-2018-1002101: smb mount security issue
Updated 2 years ago
CVE-2018-1002100: Kubectl copy doesn't check for paths outside of it's destination directory.
Updated 2 years ago
CVE-2017-1002100: Azure PV should be Private scope not Container scope
Updated 2 years ago
CVE-2021-3121: Processes may panic upon receipt of malicious protobuf messages
Updated 2 years ago
CVE-2019-11255: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation
Updated 2 years ago
CVE-2019-11253: Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack
Updated 2 years ago
CVE-2019-11251: kubectl cp symlink vulnerability
Updated 2 years ago
CVE-2019-11250: Bearer tokens are revealed in logs
Updated 2 years ago
CVE-2019-11245: container uid changes to root after first restart or if image is already pulled to the node
Updated 2 years ago
CVE-2019-11244: `kubectl:-http-cache=<world-accessible dir>` creates world-writeable cached schema files
Updated 2 years ago
CVE-2022-3172: Aggregated API server can cause clients to be redirected (SSRF)
Updated 2 years ago
CVE-2021-25749: `runAsNonRoot` logic bypass for Windows containers
Updated 2 years ago
CVE-2021-25741: Symlink Exchange Can Allow Host Filesystem Access
Updated 2 years ago
CVE-2021-25737: Holes in EndpointSlice Validation Enable Host Network Hijack
Updated 2 years ago
CVE-2021-25735: Validating Admission Webhook does not observe some previous fields
Updated 2 years ago
CVE-2020-8566: Ceph RBD adminSecrets exposed in logs when loglevel >= 4
Updated 2 years ago
CVE-2020-8565: Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9
Updated 2 years ago
CVE-2020-8564: Docker config secrets leaked when file is malformed and log level >= 4
Updated 2 years ago
CVE-2020-8563: Secret leaks in kube-controller-manager when using vSphere provider
Updated 2 years ago
CVE-2020-8559: Privilege escalation from compromised node to cluster
Updated 2 years ago
CVE-2020-8558: Node setting allows for neighboring hosts to bypass localhost boundary
Updated 2 years ago
CVE-2020-8557: Node disk DOS by writing to container /etc/hosts
Updated 2 years ago
CVE-2020-8555: Half-Blind SSRF in kube-controller-manager
Updated 2 years ago
CVE-2020-8554: Man in the middle using LoadBalancer or ExternalIPs
Updated 2 years ago
CVE-2020-8552: apiserver DoS (oom)
Updated 2 years ago
CVE-2020-8551: Kubelet DoS via API
Updated 2 years ago
CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
Updated 2 years ago
CVE-2019-11254: kube-apiserver Denial of Service vulnerability from malicious YAML payloads
Updated 2 years ago
CVE-2019-11249: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal
Updated 2 years ago
CVE-2019-11248: /debug/pprof exposed on kubelet's healthz port
Updated 2 years ago
CVE-2019-11247: API server allows access to custom resources via wrong scope
Updated 2 years ago
CVE-2019-11243: rest.AnonymousClientConfig() does not remove the serviceaccount credentials from config created by rest.InClusterConfig()
Updated 2 years ago
CVE-2019-1002100: json-patch requests can exhaust apiserver resources
Updated 2 years ago
CVE-2018-1002102: Unvalidated redirect
Updated 2 years ago
CVE-2017-1002102: atomic writer volume handling allows arbitrary file deletion in host filesystem
Updated 2 years ago
CVE-2017-1002101: subpath volume mount handling allows arbitrary file access in host filesystem
Updated 2 years ago
CVE-2017-1000056: PodSecurityPolicy admission plugin authorizes incorrectly
Updated 2 years ago