GO-2026-5046 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, bento, splunk-otel-collector, dapr...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, rancher-fleet, vcluster, kubernetes-csi-driver-hostpath, docker-machine-driver-harvester, emissary, rancher-system-agent...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: tempo, chartmuseum, gomplate, octo-sts, fluent-bit-plugin-loki, ksops, kargo, consul-k8s, nri-rabbitmq, kyverno-policy-reporter-ui, kuma, stern, mongo-tools, aws-application-networking-k8s, rancher-webhook, cluster-api-azure-controller, cloud-provider-aws, lvm-driver...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: cis-operator, cluster-api-helm-controller, spire-server, crossplane-provider-aws-sqs, flux-image-reflector-controller, libnvidia-container, vcluster, prometheus, tekton-chains, consul-k8s, crossplane-provider-aws-cloudformation, flux, argocd-image-updater,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, secrets-store-csi-driver-provider-gcp, chartmuseum, gomplate, flux-image-reflector-controller, oauth2-proxy, git-lfs, k3d, buildkitd, minio, pulumi-language-java, flux, yq, kubernetes-csi-livenessprobe, k8sgpt-operator,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: kafkaexporter, nri-couchbase, chartmuseum, licenseclassifier, yam, gomplate, cni-plugins, octo-sts, ksops, spire-controller-manager, jitsucom-jitsu, rabbitmq-default-user-credential-updater, nri-rabbitmq, kyverno-policy-reporter-ui, nri-cassandra, fq, yq, mongo-tools...

GO-2024-3106 vulnerabilities

Vulnerabilities for packages: kafkaexporter, nri-couchbase, chartmuseum, yam, gomplate, cni-plugins, opentelemetry-collector-contrib, octo-sts, fluent-bit-plugin-loki, ksops, kargo, rabbitmq-default-user-credential-updater, nri-rabbitmq, kyverno-policy-reporter-ui, nri-cassandra, fq, chezmoi,...

CVE-2026-47766: UNIX Symbolic Link (Symlink) Following

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CLEANSTART-2026-PU07904 Security fixes in fluent-operator 3.9.0-r2

Package fluent-operator version 3.9.0-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-WX78037 Security fixes in kubernetes-dns-node-cache 1.26.8-r6

Package kubernetes-dns-node-cache version 1.26.8-r6 fixes 2 vulnerabilities: CVE-2026-50274, ghsa-74j5-xf3v-crq8...

[SECURITY] Fedora 43 Update: cri-o1.34-1.34.11-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 44 Update: cri-o1.34-1.34.11-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

Fedora 44 : cri-o1.34 (2026-8ce4ffda9c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ce4ffda9c advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

Fedora 43 : cri-o1.34 (2026-7e85920dc5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7e85920dc5 advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

PT-2026-71326

Name of the Vulnerable Software and Affected Versions KubeVirt affected versions not specified Description A symlink following issue exists in the KubeVirt virt-handler migration proxy. During live migration, virt-handler uses net.Dial to connect to Unix sockets within the target virt-launcher po...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

CVE-2026-32677 concerns a path traversal vulnerability in gaudi-container-runtime prior to version 1.24.0 within Ring 3: User Applications. The root cause is a path traversal issue that could allow an unprivileged, authenticated user with low attack complexity and passive user interaction to esca...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...