GO-2026-5046 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, dapr, bento, opentelemetry-collector-contrib...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes-csi-driver-hostpath, rancher-system-agent, docker-machine-driver-harvester, emissary, cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, yunikorn-k8shim, rancher-fleet...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, wgcf, k8ssandra-operator, skopeo, step-issuer, crossplane-provider-family-aws, go-discover, victoriametrics, redis-operator, kaniko, gitlab-pages, vitess, telegraf, prometheus, rancher-fleet, maru, kpt, metacontroller, whereabouts,...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-aws-cloudformation, step-issuer, go, crossplane-provider-family-aws, redpanda, crossplane-provider-aws-sqs, cloudnative-pg, vertical-pod-autoscaler, kube-bench, vcluster, container-object-storage-interface,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: prometheus-operator, terraform, zot, vertical-pod-autoscaler, sigstore-scaffolding, secrets-store-csi-driver, oauth2-proxy, ollama, kubewatch, flux, k3s, kpt, k3d, metacontroller, bom, flux-helm-controller, pulumi-language-yaml, weaviate, dive, aactl, dex, falcoctl,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: wgcf, skopeo, step-issuer, wait-for-port, kaniko, prometheus, gobump, maru, kpt, fulcio, kubernetes-dashboard-auth, goreleaser, pgtimetable, aactl, mage, aws-signer-notation-plugin, fuse-overlayfs-snapshotter, wireguard-go, bazelisk, ksops, hello-world-golang, nerdct...

GO-2024-3106 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, wgcf, k8ssandra-operator, skopeo, step-issuer, crossplane-provider-family-aws, wait-for-port, victoriametrics, kaniko, rancher-fleet, gobump, kpt, metacontroller, whereabouts, fulcio, nri-discovery-kubernetes, glow, goreleaser, aactl,...

CVE-2026-47766: UNIX Symbolic Link (Symlink) Following

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CLEANSTART-2026-PU07904 Security fixes in fluent-operator 3.9.0-r2

Package fluent-operator version 3.9.0-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-WX78037 Security fixes in kubernetes-dns-node-cache 1.26.8-r6

Package kubernetes-dns-node-cache version 1.26.8-r6 fixes 2 vulnerabilities: CVE-2026-50274, ghsa-74j5-xf3v-crq8...

[SECURITY] Fedora 43 Update: cri-o1.34-1.34.11-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 44 Update: cri-o1.34-1.34.11-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

Fedora 44 : cri-o1.34 (2026-8ce4ffda9c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ce4ffda9c advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

Fedora 43 : cri-o1.34 (2026-7e85920dc5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7e85920dc5 advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

PT-2026-71326

Name of the Vulnerable Software and Affected Versions KubeVirt affected versions not specified Description A symlink following issue exists in the KubeVirt virt-handler migration proxy. During live migration, virt-handler uses net.Dial to connect to Unix sockets within the target virt-launcher po...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

CVE-2026-32677 concerns a path traversal vulnerability in gaudi-container-runtime prior to version 1.24.0 within Ring 3: User Applications. The root cause is a path traversal issue that could allow an unprivileged, authenticated user with low attack complexity and passive user interaction to esca...