865 matches found
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: hubble-ui, witness, kubescape, nerdctl-fips, rke2-runtime, cosmo-router-fips, vitess, falcoctl, kubescape-server, gitaly, rke2-runtime-fips, opentelemetry-ebpf-instrumentation, delve, gitaly-fips, milvus, docker, docker-fips, elastic-agent, envoy-gateway-fips,...
GO-2025-3748 vulnerabilities
Vulnerabilities for packages: ipfs-cluster-fips, k3s...
GO-2023-2331 vulnerabilities
Vulnerabilities for packages: kube-oidc-proxy, kubescape, kubernetes-csi-external-resizer, metrics-server-fips, temporal, metrics-server, buildkitd, temporal-server, temporal-server-fips, cri-tools, docker-compose, rancher-webhook-fips, kubernetes, kubevela, envoy-ratelimit, aws-ebs-csi-driver,...
GO-2026-5527 vulnerabilities
Vulnerabilities for packages: argo-workflows, argo-workflows-fips, kubeflow-pipelines-driver-fips, kubeflow-pipelines, kubeflow-pipelines-fips...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: grafana, nuclei, witness, opentelemetry-collector-contrib, nfpm, k8sgpt, eksctl, cri-tools, minio, tempo, teleport, goreleaser, ollama, prometheus, gitlab-runner, vcluster, lazygit, malcontent, loki, opentelemetry-collector, terragrunt, grafana-alloy, dagger, dgraph,...
GO-2024-2994 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, local-static-provisioner, nodetaint, kubernetes-csi-driver-hostpath, argocd-image-updater, cri-tools, k8s-device-plugin, spark-operator, ip-masq-agent, kubernetes-dns-node-cache...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: docker-compose, harbor-scanner-trivy, k3d, policy-controller, buf, neuvector-scanner, syft, docker, helm-push, kaniko, cri-tools, melange, wolfictl, grype, dagger...
EUVD-2026-57615
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
CVE-2026-13622
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
CVE-2026-13622
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...
Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.42 security update
Red Hat build of MicroShift release 4.19.42 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7
CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7. A patched version of the package is available...
Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...
CVE-2026-15809
A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...
CVE-2026-15809 Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env
A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...
CVE-2026-15809 Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env
A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...
CVE-2026-15809
A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.24 security and extras update
Red Hat OpenShift Container Platform release 4.21.24 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...
OESA-2026-2892 containerd security update
containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...