https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:02:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-01721 bdu:2022-01721 https://cve.radiocsirt.org/vuln/bdu:2022-01721 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0003 certfr-2025-avi-0003 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0003 https://cve.radiocsirt.org/vuln/euvd-2026-11210 EUVD-2026-11210 https://cve.radiocsirt.org/vuln/euvd-2026-11210 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0759 <p>A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).</p> <p>A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0759 https://cve.radiocsirt.org/vuln/ghsa-69p3-xp37-f692 <p><strong>Affected:</strong> RubyGems: kubeclient</p> <p>A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).</p> <p><strong>Affected:</strong> RubyGems: kubeclient</p> <p>A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).</p> https://cve.radiocsirt.org/vuln/ghsa-69p3-xp37-f692 https://cve.radiocsirt.org/vuln/gsd-2022-0759 gsd-2022-0759 https://cve.radiocsirt.org/vuln/gsd-2022-0759 https://cve.radiocsirt.org/vuln/rhsa-2022:1461 <p>kubeclient: kubeconfig parsing error can lead to MITM attacks prometheus/client_golang: Denial of service using InstrumentHandlerCounter</p> <p>kubeclient: kubeconfig parsing error can lead to MITM attacks prometheus/client_golang: Denial of service using InstrumentHandlerCounter</p> https://cve.radiocsirt.org/vuln/rhsa-2022:1461 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0759 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: ruby-kubeclient, Ubuntu:20.04:LTS: ruby-kubeclient, Ubuntu:22.04:LTS: ruby-kubeclient, Ubuntu:24.04:LTS: ruby-kubeclient, Ubuntu:25.10: ruby-kubeclient, Ubuntu:26.04:LTS: ruby-kubeclient</p> <p>A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: ruby-kubeclient, Ubuntu:20.04:LTS: ruby-kubeclient, Ubuntu:22.04:LTS: ruby-kubeclient, Ubuntu:24.04:LTS: ruby-kubeclient, Ubuntu:25.10: ruby-kubeclient, Ubuntu:26.04:LTS: ruby-kubeclient</p> <p>A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0759 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0069 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Logging Subsystem ausnutzen, um Sicherheitsmechanismen zu umgehen und um einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Logging Subsystem ausnutzen, um Sicherheitsmechanismen zu umgehen und um einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0069