kubernetes-dashboard-auth-fips

Direct Vulnerabilities

Known vulnerabilities in the kubernetes-dashboard-auth-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2026-94447	<1.4.0-r10
L CVE-2026-94444	<1.4.0-r10
L CVE-2026-78667	<1.4.0-r10
L CVE-2026-56866	<1.4.0-r10
L CVE-2026-94439	<1.4.0-r10
L CVE-2026-97030	<1.4.0-r10
L CVE-2026-94440	<1.4.0-r10
L CVE-2026-94448	<1.4.0-r10
L CVE-2026-56857	<1.4.0-r10
L CVE-2026-97031	<1.4.0-r10
L CVE-2026-56865	<1.4.0-r9
L CVE-2026-56864	<1.4.0-r9
L CVE-2026-33818	<1.4.0-r9
L CVE-2026-56860	<1.4.0-r9
L CVE-2026-56859	<1.4.0-r9
L CVE-2026-56853	<1.4.0-r9
L CVE-2026-56858	<1.4.0-r9
L CVE-2026-56862	<1.4.0-r9
L CVE-2026-42505	<1.4.0-r8
L CVE-2026-39822	<1.4.0-r8
L Improper Restriction of Rendered UI Layers or Frames	*
L Improper Restriction of Rendered UI Layers or Frames	*
L Deserialization of Untrusted Data	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Missing Authorization	*
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	*
M CVE-2025-47911	*
L Resource Exhaustion	*
L Missing Authorization	*
L Improper Restriction of Rendered UI Layers or Frames	*
L Cross-site Scripting (XSS)	*
L Reachable Assertion	*
L Incorrect Type Conversion or Cast	*
L CVE-2026-46598	*
L Improper Certificate Validation	*
L Out-of-Bounds	*
L Improper Verification of Cryptographic Signature	*
L Improper Certificate Validation	*
L Improper Certificate Validation	*
L CVE-2026-39821	*
L CVE-2026-46595	*
L Integer Overflow or Wraparound	*
L CVE-2026-42507	<1.4.0-r7
L CVE-2026-42504	<1.4.0-r7
L CVE-2026-27145	<1.4.0-r7
L CVE-2026-42499	<1.4.0-r6
L CVE-2026-39825	<1.4.0-r6
L Cross-site Scripting (XSS)	<1.4.0-r6
M Out-of-bounds Write	<1.4.0-r6
M Link Following	<1.4.0-r6
H Allocation of Resources Without Limits or Throttling	<1.4.0-r6
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.4.0-r6
H NULL Pointer Dereference	<1.4.0-r6
H Double Free	<1.4.0-r6
L CVE-2026-42501	<1.4.0-r6
L Improper Encoding or Escaping of Output	<1.4.0-r6
C CVE-2026-27143	<1.4.0-r5
H Access of Resource Using Incompatible Type ('Type Confusion')	<1.4.0-r5
H Improper Certificate Validation	<1.4.0-r5
H Improper Certificate Validation	<1.4.0-r5
M Allocation of Resources Without Limits or Throttling	<1.4.0-r5
M Link Following	<1.4.0-r5
L CVE-2026-32280	<1.4.0-r5
M Cross-site Scripting (XSS)	<1.4.0-r5
H Allocation of Resources Without Limits or Throttling	<1.4.0-r5
H Incorrect Authorization	<1.4.0-r5
L Directory Traversal	<1.4.0-r4
L Improper Certificate Validation	<1.4.0-r4
L Cross-site Scripting (XSS)	<1.4.0-r4
L Improper Certificate Validation	<1.4.0-r4
L Direct Request ('Forced Browsing')	<1.4.0-r4
C CVE-2025-68121	<1.4.0-r2
L CVE-2025-61732	<1.4.0-r2
L Allocation of Resources Without Limits or Throttling	<1.4.0-r1
L CVE-2025-61730	<1.4.0-r1
L Out-of-bounds Write	<1.4.0-r1
L CVE-2025-61731	<1.4.0-r1
L Allocation of Resources Without Limits or Throttling	<1.4.0-r1
L CVE-2025-58181	*
L CVE-2025-47914	*

kubernetes-dashboard-auth-fips

Direct Vulnerabilities

Fix vulnerabilities automatically