GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
6965
Downloads
12.9M
Verified
6965
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-19274: K8s Clusterrolebinding Bare Subject Namecve-2026-19274-k8s-clusterrolebinding-bare-subject-name

ClusterRoleBinding uses the bare namespaced subject name as its cluster-scoped resource name without namespace qualification. In multi-tenant environments, this can cause naming collisions and allow tenants to hijack or delete cluster-level RBAC bindings.

GoCVE-2026-19274CWE-284CWE-668
by Provallyupdated 2026-10-27Apache-2.0
460 direct46 via packs
71
All matching rules loaded.