GO-2025-4222 vulnerabilities

Vulnerabilities for packages: buildah, rootlesskit, kuma, flannel, podman, containerd, docker, multus-cni, calico, istio, azure-ipam, k3s, buildkitd, nerdctl, datadog-agent...

SUSE CVE-2026-41185

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

Calico Inserts Sensitive Information into Log File

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

CVE-2026-41185

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

CVE-2026-41185 ServiceAccount token disclosure via Azure IPAM CNI plugin logs

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

CVE-2026-41185 ServiceAccount token disclosure via Azure IPAM CNI plugin logs

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

EUVD-2026-32933

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

CVE-2026-41185 ServiceAccount token disclosure via Azure IPAM CNI plugin logs

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

CVE-2026-41185: Insertion of Sensitive Information into Log File

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

Tigera Calico 安全漏洞

Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workloads. Tigera Calico has a security vulnerability, which stems from the Azure IPAM plugin recording unencrypted configuration mappings in logs...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, tetragon, k8sgpt-operator, pgtimetable, vault-env, external-secrets-operator, wgcf, go-licenses, envconsul, azuredisk-csi, karma, cluster-api-azure-controller, mods, gke-gcloud-auth-plugin, openbao, falco-exporter, skope...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, tetragon, k8sgpt-operator, pgtimetable, vault-env, external-secrets-operator, wgcf, go-licenses, envconsul, azuredisk-csi, karma, cluster-api-azure-controller, mods, gke-gcloud-auth-plugin, openbao, falco-exporter, skope...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: istio-fips, kuma, nerdctl, docker, amazon-k8s-cni-fips, buildkitd-fips, containerd, datadog-agent, istio, azure-ipam, buildah, rootlesskit-fips, containerd-fips, calico, rke2-runtime, flannel, nerdctl-fips, k3s, datadog-agent-fips, flannel-fips, calico-fips,...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: istio-fips, kuma, nerdctl, docker, amazon-k8s-cni-fips, buildkitd-fips, containerd, datadog-agent, istio, azure-ipam, buildah, rootlesskit-fips, containerd-fips, calico, rke2-runtime, flannel, nerdctl-fips, k3s, datadog-agent-fips, flannel-fips, calico-fips,...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: buildah, rootlesskit, kuma, flannel, podman, containerd, docker, multus-cni, calico, istio, azure-ipam, k3s, buildkitd, nerdctl, datadog-agent...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: buildah, rootlesskit, kuma, flannel, podman, containerd, docker, multus-cni, calico, istio, azure-ipam, k3s, buildkitd, nerdctl, datadog-agent...

CVE-2025-58187 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, k8sgpt-operator, wgcf, vault-env, go-licenses, envconsul, cosign, mods, go-tools, gke-gcloud-auth-plugin, falco-exporter, skopeo, harbor-registry, kiali, mockery, xeol, iptables-wrappers, smarter-device-manager,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, aws-signer-notation-plugin, ip-masq-agent, docker-cli-buildx, harbor, kubernetes-dashboard-web, wgcf, vault-env, kbld, go-licenses, gosu, rancher-machine, envconsul, doppler-kubernetes-operator, bom, rancher-system-agent...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, k8sgpt-operator, wgcf, vault-env, go-licenses, envconsul, cosign, mods, go-tools, gke-gcloud-auth-plugin, falco-exporter, skopeo, harbor-registry, kiali, mockery, xeol, iptables-wrappers, smarter-device-manager,...