GO-2026-5046 vulnerabilities

Vulnerabilities for packages: dapr, splunk-otel-collector, bento, opentelemetry-collector-contrib...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: rancher-fleet, cloud-provider-gcp-cloud-controller-manager, yunikorn-k8shim, emissary, docker-machine-driver-harvester, kubernetes-csi-driver-hostpath, mesosphere-vsphere-csi, vcluster, rancher-system-agent...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: spark-operator, tetragon, k8sgpt-operator, wgcf, vault-env, external-secrets-operator, envconsul, azuredisk-csi, buildah, karma, cosign, cluster-api-azure-controller, temporal-server, mods, falco-exporter, skopeo, knative-operator, telegraf, harbor-registry, kiali,...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: spark-operator, spire-server, docker-cli-buildx, grafana-mimir, external-secrets-operator, addon-resizer, flux-image-reflector-controller, pulumi-kubernetes-operator, crossplane-provider-aws-lambda, kyverno, cert-manager, containerd, prometheus, spicedb-operator,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: spark-operator, crossplane-provider-azure, k8sgpt-operator, kubernetes-dashboard, bom, flux-image-reflector-controller, pulumi-kubernetes-operator, cosign, aws-load-balancer-controller, kubewatch, hey, gke-gcloud-auth-plugin, frp, oauth2-proxy, aactl,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, crossplane-provider-azure, spire-server, pgtimetable, wgcf, go-licenses, buildah, karma, temporal-server, gke-gcloud-auth-plugin, falco-exporter, skopeo, harbor-registry, nri-nginx, azcopy, rclone, kubernetes-dns-node-cache, nri-haproxy...

GO-2024-3106 vulnerabilities

Vulnerabilities for packages: spark-operator, crossplane-provider-azure, spire-server, k8sgpt-operator, wgcf, go-licenses, buildah, cosign, mods, gke-gcloud-auth-plugin, skopeo, harbor-registry, nvidia-container-toolkit, grafana-operator, mockery, nri-nginx, azcopy, rclone,...

CVE-2026-47766: UNIX Symbolic Link (Symlink) Following

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CLEANSTART-2026-PU07904 Security fixes in fluent-operator 3.9.0-r2

Package fluent-operator version 3.9.0-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-WX78037 Security fixes in kubernetes-dns-node-cache 1.26.8-r6

Package kubernetes-dns-node-cache version 1.26.8-r6 fixes 2 vulnerabilities: CVE-2026-50274, ghsa-74j5-xf3v-crq8...

[SECURITY] Fedora 43 Update: cri-o1.34-1.34.11-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 44 Update: cri-o1.34-1.34.11-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

Fedora 44 : cri-o1.34 (2026-8ce4ffda9c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ce4ffda9c advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

Fedora 43 : cri-o1.34 (2026-7e85920dc5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7e85920dc5 advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

PT-2026-71326

Name of the Vulnerable Software and Affected Versions KubeVirt affected versions not specified Description A symlink following issue exists in the KubeVirt virt-handler migration proxy. During live migration, virt-handler uses net.Dial to connect to Unix sockets within the target virt-launcher po...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

CVE-2026-32677 concerns a path traversal vulnerability in gaudi-container-runtime prior to version 1.24.0 within Ring 3: User Applications. The root cause is a path traversal issue that could allow an unprivileged, authenticated user with low attack complexity and passive user interaction to esca...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...