Kubernetes CVE-2026-3865

A critical vulnerability in Kubernetes ingress-nginx controller allows unauthenticated attackers with pod network access

Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio

Kubernetes ingress-nginx contains a configuration injection vulnerability via the mirror-target and mirror-host Ingress

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingres

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-c

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Rated critical severity (CVSS 9.9), this vulne

Unauthenticated remote attackers can trigger complete database overwrites, server-side file reads, and SSRF attacks agai

The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4

Fluentd configuration injection in the kube-logging Logging operator before 6.6.0 allows a namespace-scoped user who can

Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass