https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:31:17 +0000 https://cve.radiocsirt.org/vuln/cve-2025-13281 <p><strong>Affected:</strong> Kubernetes</p> <p>A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).</p> <p><strong>Affected:</strong> Kubernetes</p> <p>A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).</p> https://cve.radiocsirt.org/vuln/cve-2025-13281 https://cve.radiocsirt.org/vuln/ghsa-4x4m-3c2p-qppc <p><strong>Affected:</strong> Go: k8s.io/kubernetes</p> <p>A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.</p> <p><strong>Affected:</strong> Go: k8s.io/kubernetes</p> <p>A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.</p> https://cve.radiocsirt.org/vuln/ghsa-4x4m-3c2p-qppc