18056 matches found
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: azure-workload-identity-webhook, pulumi-kubernetes-operator, ipfs-cluster, external-secrets-operator, dynamic-localpv-provisioner, karma, k8ssandra-operator, nri-nginx, malcontent, neuvector-dbgen, rancher-agent, sftpgo-plugin-eventsearch, cluster-api, sealed-secrets...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: azure-workload-identity-webhook, pulumi-kubernetes-operator, ipfs-cluster, external-secrets-operator, dynamic-localpv-provisioner, karma, k8ssandra-operator, nri-nginx, malcontent, neuvector-dbgen, rancher-agent, sftpgo-plugin-eventsearch, cluster-api, sealed-secrets...
OPENSUSE-SU-2026:11520-1 kubevirt1.9-container-disk-1.9.0-1.1 on GA media
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-76446
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media
These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-QV9R-C865-CP47 vulnerabilities
Vulnerabilities for packages: nacos-docker, apache-jena-fuseki, airbyte-server-fips, pinot-fips, sonarqube, wildfly, nacos, strimzi-kafka-operator, pinot, kafka-fips, zaproxy, traccar, apache-tika-fips, apache-hop, apache-activemq, cruise-control-fips, hono, apache-tika, druid, flink, kafka,...
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-evidently-fips, aws-load-balancer-controller-fips, trufflehog-fips, cosmo-router-fips, jupyterhub-k8s-image-awaiter-fips, trivy-k8s-wrapper-fips, crossplane-provider-aws-applicationinsights-fips, prometheus-process-exporter-fips,...
GO-2026-6089 vulnerabilities
Vulnerabilities for packages: kapp-controller, crossplane-provider-aws-evidently-fips, crossplane-provider-aws-rolesanywhere-fips, crossplane-provider-aws-workspaces, crossplane-provider-aws-datasync-fips, kubeflow-pipelines, rke2-cloud-provider-fips, aws-load-balancer-controller-fips,...
CVE-2026-54526 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: falco-no-driver, renovate, cilium, zot, k8s-device-plugin, cert-manager, containerd, nerdctl, helm, kots, kyverno, snyk-cli, k3s, trino, aactl, spire-server, k3d...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: falco-no-driver, renovate, cilium, zot, k8s-device-plugin, cert-manager, containerd, nerdctl, helm, kots, kyverno, snyk-cli, k3s, trino, aactl, spire-server, k3d...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: tileserver-gl, jitsucom-jitsu...
AZL-95985 CVE-2026-47766 affecting package crun 1.24-6
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
EUVD-2026-58714
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...
CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...