1082 matches found
CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
EUVD-2026-65156
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113
CRI-O is vulnerable in its container-creation environment-variable handling (mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/container_create.go). When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to the target OCI image's confi...
CVE-2026-17113
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113: Improper Validation of Specified Type of Input
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
PT-2026-81044
Name of the Vulnerable Software and Affected Versions CRI-O affected versions not specified Description A flaw exists in the container-creation environment-variable handling within the mergeEnvs function located in server/utils.go and used by setupContainerEnvironmentAndWorkdir in server/containe...
PT-2026-85318
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/container create.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: skopeo (UTSA-2026-102707)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102707 advisory. A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to...
OESA-2026-3448 skopeo security update
A command line utility that performs various operations on container images and image repositories Security Fixes: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result i...
OESA-2026-3445 skopeo security update
A command line utility that performs various operations on container images and image repositories Security Fixes: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result i...
GO-2026-6238 vulnerabilities
Vulnerabilities for packages: delve, witness, milvus, nerdctl-fips, gitaly-fips, splunk-otel-collector-fips, splunk-otel-collector, hubble-fips, kubescape-operator, kubescape-operator-fips, falcoctl-fips, cosmo-router, kubescape-server, hubble-ui-backend-fips, virt-handler, hubble-ui,...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: delve, witness, milvus, nerdctl-fips, gitaly-fips, splunk-otel-collector-fips, splunk-otel-collector, hubble-fips, kubescape-operator, kubescape-operator-fips, falcoctl-fips, cosmo-router, kubescape-server, hubble-ui-backend-fips, virt-handler, hubble-ui,...
GO-2025-3748 vulnerabilities
Vulnerabilities for packages: ipfs-cluster-fips, k3s...
GO-2026-5527 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...
GO-2023-2331 vulnerabilities
Vulnerabilities for packages: buildkitd, volume-modifier-for-k8s, docker-compose, temporal-server, metrics-server-fips, kubevela, envoy-ratelimit, kubernetes-csi-external-resizer, cri-tools, temporal, prometheus-adapter-fips, aws-ebs-csi-driver, rancher-webhook, k3s, kubernetes, prometheus-adapte...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: vcluster, loki, tempo, dgraph, kubevela, terragrunt, minio, datadog-agent, gitlab-runner, teleport, terraform-mcp-server, k8sgpt, opentelemetry-collector, witness, weaviate, cri-tools, prometheus, nuclei, maru, dagger, malcontent, nfpm, ollama, grafana, mcp-grafana,...
GO-2024-2994 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, spark-operator, local-static-provisioner, kubeflow-pipelines, aws-efs-csi-driver, ip-masq-agent, k8s-device-plugin, nodetaint, cri-tools, kubernetes-csi-driver-hostpath, argocd-image-updater...