GO-2026-5242 vulnerabilities

Vulnerabilities for packages: dapr...

GO-2026-6008 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: dapr-fips, cosign-fips, kots, tfsec, kyverno-notation-aws-fips, policy-controller, conftest, conftest-fips, witness, spire-server, dapr, kyverno, kyverno-notation-aws, spire-server-fips, kyverno-fips, trivy-fips, trivy, cosign, policy-controller-fips...

GO-2024-3071 vulnerabilities

Vulnerabilities for packages: cilium-cli, cilium, hubble-fips, hubble, cilium-fips, hubble-ui, hubble-ui-backend-fips...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: helm-operator, cilium-cli, eksctl, zot, flux-source-controller, kots, k9s, helm-push, zarf, up, kubevela, kubescape, trivy, k8sgpt, flux-helm-controller, chartmuseum...

GO-2024-3171 vulnerabilities

Vulnerabilities for packages: skopeo-fips, zot, podman, skopeo, buildah...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: zot, teleport-operator-fips, trivy-operator, flux-source-controller, cosign-fips, falcoctl-fips, skaffold-fips, crossplane, zarf, ko-fips, cg, kyverno-notation-aws-fips, policy-controller, sigstore-scaffolding, skaffold, gh, tkn-fips,...

GO-2023-2330 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, cilium-envoy-fips, backup-restore-operator, cilium-envoy, gitlab-rails-ce, localstack, rke2-runtime, etcd, runc, rke2-runtime-fips, k3s, gendesk, gitness, etcd-fips, wuzz, aws-load-balancer-controller, k8s-device-plugin,...

CVE-2026-73419 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

RHSA-2026:51036 Red Hat Security Advisory: OpenShift Container Platform 4.22.9 packages and security update

Bulletin has no description...

CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-62775 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability

...

Linux Distros Unpatched Vulnerability : CVE-2026-18107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critica...

EUVD-2026-49986

A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...

CVE-2026-15809

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

CVE-2026-15809

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

RHEL 10 : podman (RHSA-2026:37072)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:37072 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

Important: oci-seccomp-bpf-hook security update

OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fixes: net: golang: Go net package: Denial of Service via long CNAME response in...

EUVD-2026-40859

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and 1.5.0-rc.1, when setting up the container rootfs, setupPtmx and setupDevSymlinks call os.Remove and os.Symlink with a filepath.Join strin...