467 matches found
ROS-20260907-73-0031
The vulnerability of the runc command, used to execute isolated containers, is related to the state of the race condition that allows for the tracking of references. Exploiting this vulnerability could enable a hacker to compromise the confidentiality, integrity, and accessibility of the protecte...
CVE-2026-17113
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-17113
CRI-O is vulnerable in its container-creation environment-variable handling (mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/container_create.go). When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to the target OCI image's confi...
CVE-2026-17113: Improper Validation of Specified Type of Input
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
CVE-2026-73500 vulnerabilities
Vulnerabilities for packages: loki, hubble, reports-server, cilium, kyverno, kine, multicluster-controlplane-fips, cilium-cli, kubernetes, dapr, minio, milvus, multicluster-controlplane, rancher-support-bundle-kit, cert-manager, kube-conformance, commercial-grafana, external-dns, kots...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: kubescape-operator-fips, envoy-gateway, virt-handler, beats-fips, cosmo-router-fips, gitaly, kubescape-server, containerd, kuma, splunk-otel-collector, cosmo-router, hubble, docker, cilium, gitaly-fips, falcoctl, opentelemetry-ebpf-instrumentation, k3s,...
GHSA-QV9R-C865-CP47 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis-fips, spark, apache-hop, apache-activemq-artemis, kafka, flink-kubernetes-operator-fips, elasticsearch-fips, kafka-fips, flink-kubernetes-operator, kserve-modelmesh, kayenta-fips, pinot, strimzi-kafka-operator, wildfly, apache-tika-fips,...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...
EUVD-2026-58714
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
GO-2025-3690 vulnerabilities
Vulnerabilities for packages: seaweedfs-operator, seaweedfs-operator-fips...
GO-2026-4841 vulnerabilities
Vulnerabilities for packages: rke2-runtime-fips, k3s, milvus...
GO-2024-2690 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2022-0776 vulnerabilities
Vulnerabilities for packages: k3d...