CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: redpanda-operator, buildah, containerd, crossplane-provider-gcp-beta-container, gitlab-cng, kyverno-notation-aws, minio, crossplane-provider-aws-elasticsearch-fips, kserve-modelmesh-serving, cluster-api-helm-controller, thanos-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: scorecard, kubernetes-csi-external-resizer, flux-kustomize-controller, step-ca, step-issuer, step, external-dns, flux, slsa-verifier, newrelic-infrastructure-agent, kube-logging-operator, guac, neuvector-sigstore-interface, crossplane-provider-family-azure, skopeo,...

UBUNTU-CVE-2026-41178

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes Parse to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue...