https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:53:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04110 bdu:2024-04110 https://cve.radiocsirt.org/vuln/bdu:2024-04110 https://cve.radiocsirt.org/vuln/cleanstart-2026-if32046 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: local-static-provisioner</p> <p>Package local-static-provisioner version 2.6.0-r1 fixes 18 vulnerabilities: ghsa-7fxm-f474-hf8w, ghsa-q78c-gwqw-jcmc, CVE-2023-3676, CVE-2023-3955, ghsa-hq6q-c2x6-hmch...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: local-static-provisioner</p> <p>Package local-static-provisioner version 2.6.0-r1 fixes 18 vulnerabilities: ghsa-7fxm-f474-hf8w, ghsa-q78c-gwqw-jcmc, CVE-2023-3676, CVE-2023-3955, ghsa-hq6q-c2x6-hmch...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-if32046 https://cve.radiocsirt.org/vuln/cnvd-2024-24974 cnvd-2024-24974 https://cve.radiocsirt.org/vuln/cnvd-2024-24974 https://cve.radiocsirt.org/vuln/euvd-2026-162496 EUVD-2026-162496 https://cve.radiocsirt.org/vuln/euvd-2026-162496 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3177 <p>A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.</p> <p>A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3177 https://cve.radiocsirt.org/vuln/ghsa-pxhw-596r-rwq5 <p><strong>Affected:</strong> Go: k8s.io/kubernetes</p> <p>A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.</p> <p><strong>Affected:</strong> Go: k8s.io/kubernetes</p> <p>A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.</p> https://cve.radiocsirt.org/vuln/ghsa-pxhw-596r-rwq5 https://cve.radiocsirt.org/vuln/gsd-2024-3177 gsd-2024-3177 https://cve.radiocsirt.org/vuln/gsd-2024-3177 https://cve.radiocsirt.org/vuln/msrc_cve-2024-3177 msrc_CVE-2024-3177 https://cve.radiocsirt.org/vuln/msrc_cve-2024-3177 https://cve.radiocsirt.org/vuln/oesa-2024-1550 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: kubernetes</p> <p>Container cluster management. Security Fix(es): A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated. (CVE-2024-3177)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: kubernetes</p> <p>Container cluster management. Security Fix(es): A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated. (CVE-2024-3177)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1550 https://cve.radiocsirt.org/vuln/rhsa-2024:0043 <p>kubernetes: kube-apiserver: bypassing mountable secrets policy imposed by the ServiceAccount admission plugin golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON</p> <p>kubernetes: kube-apiserver: bypassing mountable secrets policy imposed by the ServiceAccount admission plugin golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON</p> https://cve.radiocsirt.org/vuln/rhsa-2024:0043 https://cve.radiocsirt.org/vuln/suse-su-2024:1403-1 <p>Security update for kubernetes1.24</p> <p>Security update for kubernetes1.24</p> https://cve.radiocsirt.org/vuln/suse-su-2024:1403-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3177 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes</p> <p>A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes</p> <p>A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3177 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0904 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kubernetes ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kubernetes ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0904