GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-2617 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-4841 vulnerabilities

Vulnerabilities for packages: k3s...

GO-2023-1785 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2026-5046 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, bento, dapr, opentelemetry-collector-contrib...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, yunikorn-k8shim, docker-machine-driver-harvester, emissary, vcluster, kubernetes-csi-driver-hostpath, rancher-system-agent, mesosphere-vsphere-csi, rancher-fleet...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: argo-events, buildkitd, nri-f5, kubevela, pluto, crossplane-provider-aws-rds, pinact, helm-mapkubeapis, k3s, kube-vip, manifest-tool, tekton-chains, gcsfuse, speedtest-go, undock, hcloud, rancher-system-upgrade-controller, gh, nri-haproxy, sftpgo-plugin-auth,...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: gitlab-runner, crossplane-provider-azure-storage, docker-cli-buildx, azure-workload-identity-webhook, nri-prometheus, crossplane-provider-aws-sns, argo-events, kubevela, ingress-nginx-controller, crossplane-provider-aws-rds, pinact, net-kourier, jaeger-operator,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: nri-prometheus, secrets-store-csi-driver-provider-gcp, buildkitd, kubevela, frp, stakater-reloader, k3s, kube-state-metrics, trillian, flux-image-automation-controller, prometheus-operator, dive, hugo, prometheus-alertmanager, weaviate, flux-source-controller, zot,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, fulcio, gobump, buildkitd, nri-f5, kubernetes-csi-driver-hostpath, kubevela, pluto, k3s, tekton-chains, speedtest-go, aws-privateca-issuer, tw, nri-jmx, undock, hcloud, velero-plugin-for-microsoft-azure, gh, nri-haproxy, kube-rbac-proxy, trino,...

GO-2024-3106 vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, fulcio, gobump, buildkitd, nri-f5, kubernetes-csi-driver-hostpath, kubevela, pluto, crossplane-provider-aws-rds, thanos, k3s, kube-vip, tekton-chains, gcsfuse, speedtest-go, nri-jmx, flannel, hcloud, hugo, gh, nri-haproxy, kube-rbac-proxy, trino,...

CLEANSTART-2026-PU07904 Security fixes in fluent-operator 3.9.0-r2

Package fluent-operator version 3.9.0-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-WX78037 Security fixes in kubernetes-dns-node-cache 1.26.8-r6

Package kubernetes-dns-node-cache version 1.26.8-r6 fixes 2 vulnerabilities: CVE-2026-50274, ghsa-74j5-xf3v-crq8...

[SECURITY] Fedora 43 Update: cri-o1.34-1.34.11-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 44 Update: cri-o1.34-1.34.11-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

Fedora 43 : cri-o1.34 (2026-7e85920dc5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7e85920dc5 advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

PT-2026-71326

Name of the Vulnerable Software and Affected Versions KubeVirt affected versions not specified Description A symlink following issue exists in the KubeVirt virt-handler migration proxy. During live migration, virt-handler uses net.Dial to connect to Unix sockets within the target virt-launcher po...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

CVE-2026-32677 concerns a path traversal vulnerability in gaudi-container-runtime prior to version 1.24.0 within Ring 3: User Applications. The root cause is a path traversal issue that could allow an unprivileged, authenticated user with low attack complexity and passive user interaction to esca...