GO-2025-3887 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k8sgpt, cerbos, kargo, k9s, kubescape, tw, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy, chart-testing, helm-push, cilium-cli,...

GO-2025-3437 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: ko, podman, portieris, spire-server, nerdctl, nuclei, trivy-operator, zot, amazon-cloudwatch-agent-operator, buildah, envoy-gateway, amazon-cloudwatch-agent, datadog-agent, grafana, cri-tools, rancher-machine, kots, rancher, trivy, osv-scanner, kpt, rancher-agent,...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: ko, podman, portieris, spire-server, nerdctl, nuclei, trivy-operator, zot, amazon-cloudwatch-agent-operator, buildah, envoy-gateway, amazon-cloudwatch-agent, datadog-agent, grafana, cri-tools, rancher-machine, kots, rancher, trivy, kpt, rancher-agent,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: ko, teleport, spire-server, tkn, goreleaser, vexctl, neuvector-sigstore-interface, kubescape, skaffold, trivy-operator, gh, ratify, zot, cosign, aactl, buildkitd, gitsign, slsa-verifier, tekton-chains, flux-source-controller, falcoctl, trivy, policy-controller,...

CVE-2026-73419 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

SUSE CVE-2026-63295

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...

CLEANSTART-2026-ES11075 Security fixes in argo-events 1.9.10-r1

Package argo-events version 1.9.10-r1 fixes 17 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-33186, ghsa-mh2q-q3fh-2475, CVE-2026-29181...

CLEANSTART-2026-IF32046 Security fixes in local-static-provisioner 2.6.0-r1

Package local-static-provisioner version 2.6.0-r1 fixes 18 vulnerabilities: ghsa-7fxm-f474-hf8w, ghsa-q78c-gwqw-jcmc, CVE-2023-3676, CVE-2023-3955, ghsa-hq6q-c2x6-hmch...

Linux Distros Unpatched Vulnerability : CVE-2026-19730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt...

RHSA-2026:51036 Red Hat Security Advisory: OpenShift Container Platform 4.22.9 packages and security update

Bulletin has no description...

ROS-20260812-73-0020

The vulnerability in podman is related to the tracking of symbolic links. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-62775 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability

...

PT-2026-75898

Name of the Vulnerable Software and Affected Versions Incus versions prior to 7.3.0 Description Project-level enforcement of restricted.containers.privilege=isolated can be bypassed, allowing a user to create a non-isolated container in a project configured to forbid them. The restriction only...

CVE-2026-54727

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

Linux Distros Unpatched Vulnerability : CVE-2026-18107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critica...

CVE-2026-18107

A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...

EUVD-2026-49986

A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...