k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

GHSA-jhjp-4c2q-xmx4

GO-2026-6538

osv · GHSA-jhjp-4c2q-xmx4

• https://github.com/falcosecurity/plugins/security/advisories/GHSA-jhjp-4c2q-xmx4
• https://github.com/falcosecurity/plugins/pull/1400
• https://github.com/falcosecurity/plugins/commit/0adb9b3c7e2c8bad53f30d01c057e038b2afa5e1
• https://github.com/falcosecurity/plugins
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-aks/v0.6.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-eks/v0.12.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-gke/v0.9.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-ovh/v0.6.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit/v0.18.0

osv · GO-2026-6538

• https://github.com/falcosecurity/plugins/security/advisories/GHSA-jhjp-4c2q-xmx4
• https://github.com/falcosecurity/plugins/commit/0adb9b3c7e2c8bad53f30d01c057e038b2afa5e1
• https://github.com/falcosecurity/plugins/pull/1400
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-aks/v0.6.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-eks/v0.12.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-gke/v0.9.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-ovh/v0.6.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit/v0.18.0

No related changes are available here.