Kubernetes Ecosystem

Config change

dozzle v10.6.12 Security relevant · 13h

Auth RBAC

Auth requirement + command palette + password fix

Open

Upgrade now

Pullrun v0.7.2 Security · 2d

Dependencies

quinn-proto update

Open

Review required

flux159/mcp-server-kubernetes v4.0.6 Security · 8d

Auth RBAC

Harden dangerous‑flag guard

Open

Review required

argo-rollouts v1.9.1 Security relevant · 9d

CVE-2026-35469 fix + module updates

Open

Upgrade now

buildkit v0.31.2 Security relevant · 10d

RCE / SSRF Breaking upgrade

Security patches

Open

Review required

authentik version/2026.2.6 Security relevant · 11d

Auth

Security patches + bug fixes

Open

Review required

flux159/mcp-server-kubernetes v4.0.2 Security relevant · 13d

Breaking upgrade

Security hardening for kubectl_create

Open

Upgrade now

nforwardauth v1.5.1 Security relevant · 16d

Auth

CVE-601 fix + dep bumps

Open

Upgrade now

flux159/mcp-server-kubernetes v4.0.1 Security · 18d

Auth Breaking upgrade

Secret value masking fix

Open

Upgrade now

pipeline v1.6.5 Security relevant · 18d

Dependencies

Go bump for CVEs

Open

Upgrade now

warpgate v0.25.6 Security relevant · 26d

Auth RBAC

Critical auth security fixes

Open

Upgrade now

Podman v5.8.4 Security relevant · 1mo

RCE / SSRF

CVE fix & crypto update

Open

Review required

ko v0.19.0 Security relevant · 1mo

RCE / SSRF

Reject GOFLAGS -toolexec

Open

Review required

tugtainer v1.30.6 Security relevant · 1mo

Auth RCE / SSRF

URL validation fix

Open

Review required

buildkit v0.31.1 Security relevant · 1mo

RCE / SSRF Breaking upgrade

Low‑severity security fixes

Open

Review required

chhoto-url 7.2.2 Security relevant · 1mo

Security fixes

Open

Upgrade now

Podman v5.8.3 Security relevant · 1mo

RCE / SSRF

CVE-2026-44517 fix

Open

Upgrade now

OpenSandbox js/sandbox/v0.1.8 Security relevant · 1mo

Dependencies

fast-uri pinning

Open

Upgrade now

openrundev/openrun](https: v0.17.7 Security relevant · 1mo

Auth

Open redirect fix

Open

Upgrade now

authentik version/2026.5.2 Security relevant · 1mo

Auth Breaking upgrade

Security patches + bugfixes

Open

Upgrade now

Concourse v8.2.3 Security relevant · 2mo

Auth

Open‑redirect CVE fix

Open

Upgrade now

authelia v4.39.20 Security relevant · 2mo

Auth RBAC

Security fixes + contributors + Docker update

Open

Upgrade now

bunkerweb v1.6.11 Security relevant · 2mo

RCE / SSRF Breaking upgrade

nginx security fix

Open

Upgrade now

Concourse v8.2.2 Security relevant · 2mo

Breaking upgrade Dependencies

CVE fix + bug fixes

Open

Upgrade now

actions-runner-controller gha-runner-scale-set-0.14.2 Security relevant · 2mo

Dependencies

Go bump for security

Open

Review required

flux2 v2.8.8 Security relevant · 2mo

Dependencies

CVE fixes, controller reliability, Helm update

Open