https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 05:49:40 +0000 https://cve.radiocsirt.org/vuln/cve-2026-44514 <p><strong>Affected:</strong> kubetail-org kubetail, kubetail-org github.com/kubetail-org/kubetail/modules/cli, kubetail-org github.com/kubetail-org/kubetail/modules/dashboard</p> <p>Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail&#39;s dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A malicious web page visited by a user with an active Kubetail session could open a WebSocket to the user&#39;s dashboard and read their Kubernetes logs in real time. This is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability and affects both the desktop deployment (default http://localhost:7500) and cluster deployments (typically behind an Ingress with HTTP basic auth). This vulnerability is fixed in 0.14.0.</p> <p><strong>Affected:</strong> kubetail-org kubetail, kubetail-org github.com/kubetail-org/kubetail/modules/cli, kubetail-org github.com/kubetail-org/kubetail/modules/dashboard</p> <p>Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail&#39;s dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A malicious web page visited by a user with an active Kubetail session could open a WebSocket to the user&#39;s dashboard and read their Kubernetes logs in real time. This is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability and affects both the desktop deployment (default http://localhost:7500) and cluster deployments (typically behind an Ingress with HTTP basic auth). This vulnerability is fixed in 0.14.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-44514