Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: KubescapeClear ×

Kubescapev4.0.12SecurityAug 12, 2026

ACTION 3CHECK 3OTHER 220View full analysis

A corrective and performance-focused release with operator-visible default and constraint changes, deprecated flag removal, and dependency vulnerability fixes. It also expands scanning, output, registry, and MCP capabilities.

Action needed (3)

securityBatch dependency vulnerability fixes
Batch 1 and 2 dependency vulnerability fixes are included in this release.
breakingRegoV1 evaluation and v0 compatibility shim removal
Rego evaluation now uses RegoV1 and drops the v0 compatibility shim in this release.
breakingLoopback-only constraint
A loopback-only constraint is applied in this release.

Check if affected (3)

breakingOpt-in pprof debug server
Applies if you enable the pprof debug server.
The pprof debug server is opt-in in this release.
breaking--frameworks default set to all
Applies if you do not configure --frameworks.
The default for --frameworks is all when the flag is not configured.
breakingDeprecated flags removal
Applies if you configure deprecated flags.
Deprecated flags are removed, and the scan documentation is updated in this release.

Source ↗

Kubescapev4.0.9SecurityMay 29, 2026

ACTION 3CHECK 3OTHER 105View full analysis

A broad maintenance release with correctness fixes, new CLI and reporting capabilities, anonymization updates, a performance improvement, added validation, and dependency refreshes. It also includes security fixes alongside changes to output and push defaults.

Action needed (3)

securityDependency updates for security advisories
Dependencies are updated to address security advisories.
securityEnvFrom clearing in container data removal
removeContainersData now clears EnvFrom to prevent secret name leakage.
securityEnv[].ValueFrom clearing in container data removal
removeContainersData and removeEphemeralContainersData now clear Env[].ValueFrom.

Check if affected (3)

security/v1/results access control hardening
Applies if you use /v1/results.
The /v1/results endpoint is hardened to remediate IDOR.
breakingThe pdf/html output default changed to file output
Applies if you use pdf/html output.
The default for pdf/html output now writes to a file instead of stdout.
breakingThe push default changed to opt-in
Applies if you use push.
The default for push is now false, so opting in is required.

Source ↗

Kubescapev4.0.0SecurityFeb 4, 2026

ACTION 1OTHER 7View full analysis

Kubescape v4.0.0 expands operator capabilities while changing sensing architecture and scan output behavior. It also updates a dependency, improves scan performance, and includes a fix for version handling and injection.

Action needed (1)

securityVersion handling and injection fix
The release fixes version handling and injection in Kubescape v4.0.0.

Source ↗

Browse by month