The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Kubernetes | — | Upgrade Kubernetes to version 1.2.0 | Jun 14, 2018 | Feb 3, 2016 |
| Redhat Openshift | — | Upgrade nodejs-async-eachUpgrade nodejs-stream-combinerUpgrade nodejs-for-inUpgrade nodejs-touchUpgrade nodejs-iniUpgrade nodejs-is-numberUpgrade nodejs-lodash.basecopyUpgrade nodejs-gotUpgrade atomic-openshiftUpgrade nodejs-lodash.isargumentsUpgrade openshiftUpgrade nodejs-lazy-cacheUpgrade nodejs-chokidarUpgrade nodejs-url-parse-laxUpgrade nodejs-xdg-basedirUpgrade nodejs-repeat-elementUpgrade nodejs-os-homedirUpgrade nodejs-event-streamUpgrade nodejs-is-redirectUpgrade nodejs-nodemonUpgrade nodejs-uuidUpgrade nodejs-undefsafeUpgrade nodejs-splitUpgrade nodejs-unzip-responseUpgrade nodejs-extglobUpgrade nodejs-is-plain-objUpgrade nodejs-glob-baseUpgrade nodejs-strip-json-commentsUpgrade nodejs-node-status-codesUpgrade nodejs-optimistUpgrade nodejs-create-error-classUpgrade nodejs-arr-diffUpgrade nodejs-throughUpgrade nodejs-lodash.isarrayUpgrade nodejs-lodash.getnativeUpgrade nodejs-object.omitUpgrade nodejs-is-globUpgrade nodejs-ansi-greenUpgrade nodejs-pause-streamUpgrade nodejs-lodash.baseassignUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-isobjectUpgrade nodejs-graceful-fsUpgrade nodejs-rcUpgrade nodejs-registry-urlUpgrade nodejs-parse-jsonUpgrade nodejs-es6-promiseUpgrade nodejs-duplexerUpgrade nodejs-write-file-atomicUpgrade nodejs-deep-extendUpgrade nodejs-is-equal-shallowUpgrade nodejs-parse-globUpgrade nodejs-is-extglobUpgrade nodejs-randomaticUpgrade nodejs-expand-rangeUpgrade nodejs-lodash.isiterateecallUpgrade origin-kibanaUpgrade nodejs-end-of-streamUpgrade nodejs-kind-ofUpgrade openvswitchUpgrade nodejs-arr-flattenUpgrade nodejs-configstoreUpgrade nodejs-bracesUpgrade nodejs-success-symbolUpgrade nodejs-is-primitiveUpgrade nodejs-binary-extensionsUpgrade nodejs-lodash.defaultsUpgrade nodejs-string-lengthUpgrade nodejs-package-jsonUpgrade heapsterUpgrade nodejs-align-textUpgrade nodejs-array-uniqueUpgrade nodejs-is-dotfileUpgrade nodejs-arrifyUpgrade nss_wrapperUpgrade nodejs-readdirpUpgrade nodejs-read-all-streamUpgrade nodejs-object-assignUpgrade openshift-ansibleUpgrade nodejs-is-streamUpgrade nodejs-lodash.createassignerUpgrade nodejs-update-notifierUpgrade nodejs-duplexifyUpgrade nodejs-timed-outUpgrade nodejs-semver-diffUpgrade nodejs-is-binary-pathUpgrade jenkinsUpgrade nodejs-ansi-wrapUpgrade nodejs-lodash.assignUpgrade nodejs-osenvUpgrade nodejs-fill-rangeUpgrade nodejs-ps-treeUpgrade nodejs-pinkie-promiseUpgrade nodejs-anymatchUpgrade nodejs-lodash.keysUpgrade nodejs-fromUpgrade nodejs-regex-cacheUpgrade nodejs-error-exUpgrade nodejs-semverUpgrade nodejs-is-npmUpgrade nodejs-prepend-httpUpgrade nodejs-lowercase-keysUpgrade nodejs-normalize-pathUpgrade nodejs-expand-bracketsUpgrade nodejs-preserveUpgrade nodejs-capture-stack-traceUpgrade nodejs-glob-parentUpgrade nodejs-for-ownUpgrade nodejs-os-tmpdirUpgrade nodejs-filename-regexUpgrade nodejs-mkdirpUpgrade nodejs-lodash.restparamUpgrade nodejs-map-streamUpgrade nodejs-pinkieUpgrade nodejs-micromatchUpgrade nodejs-is-extendableUpgrade nodejs-latest-versionUpgrade nodejs-slide | Jun 18, 2018 | Jan 11, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub