github.com/falcosecurity/plugins/plugins/k8saudit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.3

GHSA-jhjp-4c2q-xmx4

k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers

The `k8saudit` plugin's per-container fields (`ka.req.pod.containers.*`) and the shipped `k8s_audit_rules.yaml` evaluated only `requestObject.spec.containers`. Security-relevant settings on a pod's `initContainers` or `ephemeralContainers` were not inspected,…

github.com/falcosecurity/plugins/plugins/k8saudit-eks github.com/falcosecurity/plugins/plugins/k8saudit-aks github.com/falcosecurity/plugins/plugins/k8saudit github.com/falcosecurity/plugins/plugins/k8saudit-gke Go

Sep 21, 2026