142 matches found
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: kube-vip, cni-plugins...
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: amazon-k8s-cni-fips, kube-vip-fips, cni-plugins-fips, cni-plugins, kube-vip...
GO-2024-2598 vulnerabilities
Vulnerabilities for packages: cfssl, http-echo, thanos, prometheus-adapter, docker-credential-ecr-login, timoni, kube-bench, haproxy-ingress, secrets-store-csi-driver-provider-aws, vexctl, cass-operator, trillian, docker-credential-gcr, dynamic-localpv-provisioner, delve,...
GO-2024-2599 vulnerabilities
Vulnerabilities for packages: cfssl, http-echo, thanos, prometheus-adapter, docker-credential-ecr-login, timoni, kube-bench, haproxy-ingress, secrets-store-csi-driver-provider-aws, vexctl, cass-operator, trillian, docker-credential-gcr, dynamic-localpv-provisioner, delve,...
GO-2026-4984 vulnerabilities
Vulnerabilities for packages: gostatsd, gatus, rancher-webhook, tempo, http-echo, thanos, apko, tekton-chains, prometheus-adapter, argo-events, zarf, istio, kubernetes-csi-external-attacher, step-issuer, ko, flyte, haproxy-ingress, octo-sts, sftpgo-plugin-pubsub, kubernetes-csi-driver-nfs,...
GO-2023-2382 vulnerabilities
Vulnerabilities for packages: metrics-server, ip-masq-agent, kubernetes-dashboard-metrics-scraper, go-md2man, docker-credential-ecr-login, sbom-scorecard, wait-for-port, kubeflow-katib, nri-discovery-kubernetes, scorecard, cass-operator, gobuster, aws-flb-firehose, docker-cli, aws-flb-kinesis,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: tempo, tekton-chains, argo-events, kube-bench, ko, cis-operator, kubernetes-csi-driver-nfs, docker-credential-gcr, delve, kubernetes-csi-external-health-monitor, hubble, mockgen, docker-cli-buildx, aws-privateca-issuer, cloud-sql-proxy, grafana-alloy,...
CLEANSTART-2026-IL06995 Security fixes in cni-plugins-fips 1.8.0-r0
Package cni-plugins-fips version 1.8.0-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...
CLEANSTART-2026-OZ77576 Security fixes in cni-plugins 1.9.0-r0
Package cni-plugins version 1.9.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
Amazon Linux 2023 : cni-plugins (ALAS2023-2026-1888)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1888 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Tenable has extracted the preceding description block directly from the tested product...
Important: cni-plugins
Issue Overview: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Affected Packages: cni-plugins Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...
Amazon Linux 2 : cni-plugins, --advisory ALAS2-2026-3386 (ALAS-2026-3386)
The version of cni-plugins installed on the remote host is prior to 1.7.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3386 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Tenable has...
Amazon Linux 2 : cni-plugins, --advisory ALAS2-2026-3311 (ALAS-2026-3311)
The version of cni-plugins installed on the remote host is prior to 1.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3311 advisory. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta...
Amazon Linux 2023 : cni-plugins (ALAS2023-2026-1723)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1723 advisory. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value refresh. A new GODEBU...
Important: cni-plugins
Issue Overview: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escapi...
Important: cni-plugins
Issue Overview: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escapi...