CVE-2026-93316

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316

The BuildKit daemon is vulnerable to a daemon panic when it is started with the --cdi-disabled flag and subsequently processes builds that attempt to use CDI devices . This issue, categorized as a NULL Pointer Dereference (CWE-476) , can occur either accidentally or maliciously. The impact is a h...

EUVD-2026-92527

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316 Starting daemon with --cdi-disabled flag can lead to panic on specific builds

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

WordPress CDI <5.1.9 - Cross Site Scripting

WordPress CDI plugin prior to 5.1.9 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the response of an AJAX action. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: harvester-fips, amazon-cloudwatch-agent-operator-fips, rancher, rke2-runtime, vault, kubevirt-cdi-uploadserver, rancher-agent, k3s, amazon-ecs-agent, amazon-cloudwatch-agent-operator, prometheus, promxy, harvester, kubevela, amazon-ecs-agent-fips, pulumi...

GO-2025-3829 vulnerabilities

Vulnerabilities for packages: bom, harvester-fips, rancher, traefik-fips, tekton-pipelines-fips, skaffold-fips, k3d, neuvector-scanner-fips, cluster-api-helm-controller, opentelemetry-operator, falcoctl, bento, docker-credential-gcr, traefik, ctop, crossplane, gatekeeper, harbor-scanner-trivy-fip...

CVE-2026-17527 Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone

In containerized-data-importer CDI, the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as sufficient to authoriz...

AZL-90170 CVE-2026-53492 affecting package containerd2 for versions less than 2.2.4-3

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a...

CVE-2026-53492

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a...

CVE-2026-53492: Improper Input Validation

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a...

Important: containerd

Issue Overview: Memory exhaustion DoS causing OOM kill of containerd process NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq CVE-2026-47262 Image cache poisoning via unvalidated checkpoint image references, enabling cross-pod code execution NOTE:...

Containerd 2.1.x < 2.1.9 / 2.2.x < 2.2.5 / 2.3.x < 2.3.2 Multiple Vulnerabilities

The version of Containerd on the remote host is 2.1.x prior to 2.1.9, 2.2.x prior to 2.2.5, or 2.3.x prior to 2.3.2. It is, therefore, affected by multiple vulnerabilities: - containerd's CRI checkpoint import process contains a vulnerability where it fails to validate the image references...

CVE-2026-53492

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: skopeo-fips, gatus, tetragon-fips, neuvector-scanner-fips, crossplane-provider-aws-rds-fips, crossplane-provider-aws-dynamodb, cert-manager-google-cas-issuer, buildah, cluster-api, gitlab-rails-ce, crossplane-provider-aws-cloudsearch, crossplane-provider-aws-ecs,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-fips, gatus, crossplane-aws-provider, newrelic-fluent-bit-output, speedtest-go, tetragon-fips, nrdot-collector-k8s-fips, bank-vaults-fips, neuvector-scanner-fips, crossplane-provider-aws-rds-fips, harbor-registry-fips, flux-source-watcher,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-fips, skopeo-fips, gatus, bank-vaults-fips, neuvector-scanner-fips, harbor-registry-fips, guac, buildah, kubescape-server-fips, sigstore-scaffolding-fips, restic, spire-controller-manager-fips, neuvector-sigstore-interface-fips,...

Incorrect Implementation of Authentication Algorithm

Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm due to an error in the protocol implementation when handling the User Supplied Secret USS digest in the LoadApp function. An attacker can cause the Compound Device Identifier CDI to b...

Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.64.0 Release notes...

SUSE-SU-2026:0571-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.64.0 - Release notes...