173 matches found
CVE-2026-41185 ServiceAccount token disclosure via Azure IPAM CNI plugin logs
When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...
CVE-2026-41184 ServiceAccount token disclosure via install-cni container logs
In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the SERVICEACCOUNTTOKEN placeholder Canal/Flannel-Calico deployments, the installer substitutes the live Kubernetes ServiceAccount bearer token before logging,...
Tigera Calico 安全漏洞
Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workload scenarios. There is a security vulnerability in Tigera Calico. This vulnerability stems from the install-cni init container recording CNI...
PT-2026-44409
Name of the Vulnerable Software and Affected Versions Calico affected versions not specified Description The install-cni init container logs the rendered CNI configuration to standard output. In Canal or Flannel-Calico deployments where the configuration template uses the SERVICEACCOUNT TOKEN...
Tigera Calico 安全漏洞
Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workload scenarios. Tigera Calico has a security vulnerability that arises from printing the complete connection configuration structure when calle...
Tigera Calico 安全漏洞
Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workloads. Tigera Calico has a security vulnerability, which stems from the Azure IPAM plugin recording unencrypted configuration mappings in logs...
PT-2026-44410
Name of the Vulnerable Software and Affected Versions Calico affected versions not specified Description When configured with the Azure IPAM plugin, the Calico CNI binary modifies the incoming CNI configuration to include subnet information before passing it to the IPAM plugin. The Azure IPAM...
CLEANSTART-2026-KY75084 Security fixes for CVE-2023-7256, CVE-2024-7598, CVE-2024-8006, CVE-2025-1767, CVE-2025-47914, CVE-2025-58181, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-67499, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 3.31.2-r0, 3.31.2-r1, 3.31.2-r2
Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JI10303 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 3.31.4-r0
Multiple security vulnerabilities affect the calico package. These issues are resolved in later releases. See references for individual vulnerability details...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013208)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013208 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Cali...
CLEANSTART-2026-GN18755 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the calico package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, fuse-overlayfs-snapshotter, kafka-proxy, aws-efs-csi-driver, kubernetes-csi-external-attacher, gitsign, fscrypt, opentelemetry-operator, rancher-helm, spqr, kubernetes-csi-driver-nfs, telegraf, crossplane, gh, polaris,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, litestream, kots, kubernetes-csi-external-snapshotter-fips, stakater-reloader, harbor-fips, flux-image-automation-controller, crossplane-provider-aws-eks-fips, dive, kustomize-fips, grafana-beyla, eks-distro, neuvector, podman,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, litestream, kots, kubernetes-csi-external-snapshotter-fips, stakater-reloader, harbor-fips, flux-image-automation-controller, crossplane-provider-aws-eks-fips, dive, kustomize-fips, grafana-beyla, eks-distro, neuvector, podman,...
CLEANSTART-2026-TO88856 Security fixes for CVE-2023-7256, CVE-2024-7598, CVE-2024-8006, CVE-2025-1767, CVE-2025-47914, CVE-2025-58181, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-67499, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 3.31.2-r0, 3.31.2-r1, 3.31.2-r2
Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VI42371 Security fixes for CVE-2025-13281, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 3.28.5-r2, 3.28.5-r4
Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-rds, steampipe, fuse-overlayfs-snapshotter, podinfo, kubernetes-csi-external-attacher, spqr, telegraf, crossplane-provider-aws-sns, kubernetes-csi-driver-nfs, pguser, ratify, tfsec, minio, argo-cd,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudfront, fuse-overlayfs-snapshotter, kubernetes-csi-driver-nfs, pguser, ratify, sriov-network-device-plugin, wazero, secrets-store-csi-driver-provider-aws, crossplane-provider-aws-cloudwatchlogs, local-static-provisioner, gostatsd,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudfront, fuse-overlayfs-snapshotter, kubernetes-csi-driver-nfs, pguser, ratify, sriov-network-device-plugin, wazero, secrets-store-csi-driver-provider-aws, crossplane-provider-aws-cloudwatchlogs, local-static-provisioner, gostatsd,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-rds, steampipe, fuse-overlayfs-snapshotter, podinfo, kubernetes-csi-external-attacher, spqr, telegraf, crossplane-provider-aws-sns, kubernetes-csi-driver-nfs, pguser, ratify, tfsec, minio, argo-cd,...