CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: hubble-ui, kuma, cosmo-router, cosmo-router-fips, kubescape-operator-fips, kubescape, hubble-ui-backend-fips, opentelemetry-ebpf-instrumentation-fips, rke2-runtime-fips, envoy-gateway-fips, gitaly-fips, docker, splunk-otel-collector-fips, cilium-fips, falcoctl,...

GHSA-QV9R-C865-CP47 vulnerabilities

Vulnerabilities for packages: nacos-docker, apache-jena-fuseki, airbyte-server-fips, pinot-fips, sonarqube, wildfly, nacos, strimzi-kafka-operator, pinot, kafka-fips, zaproxy, traccar, apache-tika-fips, apache-hop, apache-activemq, cruise-control-fips, hono, apache-tika, druid, flink, kafka,...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

EUVD-2026-58714

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766

CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...

CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

GO-2025-3690 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator-fips, seaweedfs-operator...

GO-2026-4841 vulnerabilities

Vulnerabilities for packages: milvus, rke2-runtime-fips, k3s...

GO-2026-5684 vulnerabilities

Vulnerabilities for packages: spegel, ipfs-cluster-fips, spegel-fips, rke2-runtime, ipfs-cluster, rke2-runtime-fips, k3s...

GO-2025-3748 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

GO-2022-0623 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2022-0776 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2023-1850 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2024-2690 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-4351 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, flux-operator...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: virt-handler, docker-machine-driver-harvester, virt-controller-fips, virt-launcher, virt-operator-fips...

GO-2022-0784 vulnerabilities

Vulnerabilities for packages: ctop...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, rke2-runtime-fips, kube-conformance, etcd, terraform, gendesk, aws-load-balancer-controller, cilium-envoy, gitlab-rails-ce, etcd-fips, gitness, rke2-runtime, cilium-envoy-fips, runc, k3s, backup-restore-operator, k8s-device-plugin, wuzz,...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: falco-no-driver, eks-distro-fips, rancher-agent, kubernetes, sriov-network-device-plugin, grafana-alloy-fips, nvidia-container-toolkit, podman, rancher, cluster-autoscaler, prometheus-podman-exporter, ctop-fips, cluster-autoscaler-fips, buildah, rke2-runtime, k3s,...