ingress-nginx mirror-target self-DOS

StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation

Subpath symlinking on Windows nodes permits NTLM coercion

Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes

Path traversal via non-tar copyDirectoryFromPod

CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server

ingress-nginx comment-based nginx configuration injection

ingress-nginx rewrite-target nginx configuration injection

ingress-nginx auth-proxy-set-headers nginx configuration injection

ingress-nginx Admission Controller denial of service

ingress-nginx auth-url protection bypass

ingress-nginx auth-method nginx configuration injection

ingress-nginx auth-method nginx configuration injection

Portworx Half-Blind SSRF in kube-controller-manager

Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks

Kubernetes secrets-store-sync-controller discloses service account tokens in logs

Nodes can delete themselves by adding an OwnerReference

VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override

Nodes can bypass dynamic resource allocation authorization checks

ingress-nginx controller - configuration injection via unsanitized auth-url annotation

ingress-nginx controller - auth secret file path traversal vulnerability

ingress-nginx controller - configuration injection via unsanitized mirror annotations

ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation

ingress-nginx admission controller RCE escalation

Network restriction bypass via race condition during namespace termination

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not…

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's di…

Arbitrary command execution through gitRepo volume

SQL Injection in CreateUser API in devtron