Open Source Vulnerabilities

pillow

CVE-2026-96639 in pillow - Patched by Root

pillow

CVE-2026-96643 in pillow - Patched by Root

pillow

GHSA-78g4-xqwv-q3g8 in pillow - Patched by Root

nfs-subdir-external-provisioner

security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack

nfs-subdir-external-provisioner

As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Ser...

nfs-subdir-external-provisioner

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal

nfs-subdir-external-provisioner

security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containe...

nfs-subdir-external-provisioner

vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to ...

nfs-subdir-external-provisioner

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node

nfs-subdir-external-provisioner

Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers

nfs-subdir-external-provisioner

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers

nfs-subdir-external-provisioner

security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook

nfs-subdir-external-provisioner

Kubernetes kube-controller-manager in versions v1

nfs-subdir-external-provisioner

security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by f...

nfs-subdir-external-provisioner

This CVE affects only Windows worker nodes

nfs-subdir-external-provisioner

half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass

nfs-subdir-external-provisioner

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec

nfs-subdir-external-provisioner

Kubernetes kubelet component in versions 1

nfs-subdir-external-provisioner

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec

nfs-subdir-external-provisioner

security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node

nfs-subdir-external-provisioner

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs

nfs-subdir-external-provisioner

In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secr...

nfs-subdir-external-provisioner

Security fix for CVE-2020-8563 applied in: nfs-subdir-external-provisioner 4.0.2-r4

nfs-subdir-external-provisioner

security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement

nfs-subdir-external-provisioner

Security fix for CVE-2020-8561 applied in: nfs-subdir-external-provisioner 4.0.2-r4

nfs-subdir-external-provisioner

security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion

nfs-subdir-external-provisioner

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files

nfs-subdir-external-provisioner

Kubernetes kube-apiserver in versions v1

nfs-subdir-external-provisioner

security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes

nfs-subdir-external-provisioner

security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes

cephfs

Security update for cephfs

nfs-subdir-external-provisioner

security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes

nfs-subdir-external-provisioner

Security fix for CVE-2020-8558 applied in: nfs-subdir-external-provisioner 4.0.2-r4

nfs-subdir-external-provisioner

Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes

nfs-subdir-external-provisioner

Security fix for CVE-2021-25741 applied in: nfs-subdir-external-provisioner 4.0.2-r4

nfs-subdir-external-provisioner

flaw was found in kube-controller-manager

nfs-subdir-external-provisioner

security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs

io.netty:netty-codec, io.netty:netty-codec-dns, io.netty:netty-codec-haproxy, io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-mqtt, io.netty:netty-codec-redis, io.netty:netty-codec-smtp, io.netty:netty-handler, io.netty:netty-handler-proxy, io.netty:netty-resolver-dns, io.netty:netty-transport-native-epoll, io.netty:netty-transport-native-kqueue, io.netty:netty-transport-sctp

TuxCare security update for io.netty (32 CVEs)

org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina

TuxCare security update for 3 packages (1 CVE)

org.jboss.netty:netty

TuxCare security update for org.jboss.netty:netty (2 CVEs)

docker-buildx

docker-buildx

docker-buildx

vault-java-driver: stored deeply nested JSON kills every thread that reads it

org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-websocket

TuxCare security update for 6 packages (9 CVEs)

io.netty:netty-all, io.netty:netty-codec, io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-redis, io.netty:netty-codec-smtp, io.netty:netty-handler

TuxCare security update for io.netty (9 CVEs)

vault-java-driver: SslConfig silently disables requested TLS verification

io.netty:netty-all, io.netty:netty-codec, io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-redis, io.netty:netty-codec-smtp, io.netty:netty-handler

TuxCare security update for io.netty (8 CVEs)

org.springframework.hateoas:spring-hateoas

TuxCare security update for org.springframework.hateoas:spring-hateoas (1 CVE)

org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-coyote

TuxCare security update for 4 packages (3 CVEs)