473 matches found
AZL-87504 CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87507 CVE-2026-27136 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87519 CVE-2026-42502 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87516 CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87513 CVE-2026-25680 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
CLEANSTART-2026-TZ10716 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.6.0-r0
Multiple security vulnerabilities affect the cni-plugin-flannel package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-M38G-VWW2-MVGX Talos Linux has a local privilege escalation from untrusted workloads
Summary A vulnerability in the Linux kernel's algifaead subsystem CVE-2026-31431, "copy.fail" allows an unprivileged container workload to corrupt arbitrary file page-cache pages via the AFALG crypto interface and splice. On Talos Linux, this vulnerability can be chained into a complete node...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.15
Red Hat OpenShift Service Mesh 2.6.15 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: vault-secrets-webhook, mc, manifest-tool, filebrowser, kiam, ceph-csi-operator-fips, k3d, pulumi, wgcf, prometheus-postgres-exporter, k8sgpt-operator, gobuster, cert-manager-csi-driver, kuberlr, act, knative-eventing-fips, terraform-provider-random-fips,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: prometheus-mysqld-exporter-fips, hcloud, mcp-grafana-fips, whereabouts, gpu-operator-fips, vault-secrets-webhook, gostatsd, mc, crossplane-provider-aws-acm-fips, trivy-operator, mc-fips, task, knative-operator, manifest-tool, crossplane-function-auto-ready-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: prometheus-mysqld-exporter-fips, hcloud, mcp-grafana-fips, whereabouts, gpu-operator-fips, vault-secrets-webhook, gostatsd, mc, crossplane-provider-aws-acm-fips, trivy-operator, mc-fips, task, knative-operator, manifest-tool, crossplane-function-auto-ready-fips,...
[SECURITY] Fedora 44 Update: containernetworking-plugins-1.9.1-1.fc44
Reference and example networking plugins, maintained by the CNI team. The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only...
CVE-2025-47911 affecting package cni for versions less than 1.1.2-5
CVE-2025-47911 affecting package cni for versions less than 1.1.2-5. A patched version of the package is available...
CVE-2025-58190 affecting package cni-plugins for versions less than 1.4.0-5
CVE-2025-58190 affecting package cni-plugins for versions less than 1.4.0-5. A patched version of the package is available...
GHSA-PH5J-38MG-J6HP vulnerabilities
Vulnerabilities for packages: podinfo, victoriametrics-cluster-fips, metacontroller, victoriametrics, librechat, localstack, nova-fips, pluto, flux-operator, grafana-rollout-operator, flux-source-controller, go, dkron, victoriametrics-cluster, loki-fips, victorialogs, omnictl-multiarch,...
CVE-2026-27137 vulnerabilities
Vulnerabilities for packages: podinfo, victoriametrics-cluster-fips, metacontroller, victoriametrics, librechat, localstack, nova-fips, pluto, flux-operator, grafana-rollout-operator, flux-source-controller, go, dkron, victoriametrics-cluster, loki-fips, victorialogs, omnictl-multiarch,...
GHSA-7HFW-R8QC-89V4 vulnerabilities
Vulnerabilities for packages: podinfo, victoriametrics-cluster-fips, metacontroller, victoriametrics, librechat, localstack, nova-fips, pluto, flux-operator, grafana-rollout-operator, flux-source-controller, go, dkron, victoriametrics-cluster, loki-fips, victorialogs, omnictl-multiarch,...
CVE-2025-47911 affecting package cni for versions less than 1.0.1-21
CVE-2025-47911 affecting package cni for versions less than 1.0.1-21. A patched version of the package is available...