falcosecurity vulnerabilities

Products

• github.com/falcosecurity/plugins/plugins/k8saudit 1
• github.com/falcosecurity/plugins/plugins/k8saudit-aks 1
• github.com/falcosecurity/plugins/plugins/k8saudit-eks 1
• github.com/falcosecurity/plugins/plugins/k8saudit-gke 1
• github.com/falcosecurity/plugins/plugins/k8saudit-ovh 1

Latest falcosecurity CVEs

Newest publication first

1. GHSA-jhjp-4c2q-xmx4 k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers

   Published 2026-09-21

   Medium·CVSS 4.3

   The k8saudit plugin's per-container fields (ka.req.pod.containers.*) and the shipped k8s_audit_rules.yaml evaluated only requestObject.spec.containers. Security-relevant settings on a pod's initContainers or ephemeralContainers were not inspected, so the shipped Create Privileged...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.