228 matches found
CLEANSTART-2026-JI10303 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 3.31.4-r0
Multiple security vulnerabilities affect the calico package. These issues are resolved in later releases. See references for individual vulnerability details...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013208)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013208 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Cali...
CLEANSTART-2026-GN18755 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the calico package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: runc, seaweedfs, temporal, emissary, kine, trillian, helm-set-status, falco-exporter, cadvisor, prometheus-adapter, wal-g, cert-manager-csi-driver, flannel, caddy, crossplane-provider-family-azure, sriov-network-device-plugin, kubescape, terraform-provider-random,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave, grafana-beyla, external-secrets-operator,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: longhorn-cli-fips, apache-beam-python-3.12-sdk, nri-postgresql-fips, kubeflow-katib, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave,...
CLEANSTART-2026-TO88856 Security fixes for CVE-2023-7256, CVE-2024-7598, CVE-2024-8006, CVE-2025-1767, CVE-2025-47914, CVE-2025-58181, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-67499, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 3.31.2-r0, 3.31.2-r1, 3.31.2-r2
Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VI42371 Security fixes for CVE-2025-13281, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 3.28.5-r2, 3.28.5-r4
Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flannel, sbomqs,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: nri-nagios, nri-redis, kine, confluent-cp-docker-utils, sonobuoy, http-echo, redis-operator, helm-docs, git-sync, kubescape-operator, terraform-provider-time, litestream, steampipe, gitness, crossplane-provider-family-aws, frp, podinfo, cilium-cli, cfssl,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: nri-nagios, nri-redis, kine, confluent-cp-docker-utils, sonobuoy, http-echo, redis-operator, helm-docs, git-sync, kubescape-operator, terraform-provider-time, litestream, steampipe, gitness, crossplane-provider-family-aws, frp, podinfo, cilium-cli, cfssl,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, nri-redis, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flanne...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: nri-nagios, nri-redis, kine, confluent-cp-docker-utils, sonobuoy, http-echo, redis-operator, helm-docs, git-sync, kubescape-operator, terraform-provider-time, litestream, steampipe, gitness, crossplane-provider-family-aws, frp, podinfo, cilium-cli, cfssl,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, nri-redis, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flanne...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flannel, sbomqs,...
GHSA-JV3W-X3R3-G6RM vulnerabilities
Vulnerabilities for packages: istio-fips, azure-ipam, rke2-runtime, buildah, datadog-agent, flannel-fips, k3s, rootlesskit, multus-cni-fips, buildkitd-fips, podman, calico, nerdctl, containerd-fips, rootlesskit-fips, amazon-k8s-cni-fips, multus-cni, nerdctl-fips, docker, kuma, buildkitd,...
CVE-2025-67499 vulnerabilities
Vulnerabilities for packages: istio-fips, azure-ipam, rke2-runtime, buildah, datadog-agent, flannel-fips, k3s, rootlesskit, multus-cni-fips, buildkitd-fips, podman, calico, nerdctl, containerd-fips, rootlesskit-fips, amazon-k8s-cni-fips, multus-cni, nerdctl-fips, docker, kuma, buildkitd,...
EUVD-2022-54538
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...