17822 matches found
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, livekit-cli, crane, kube-conformance, crossplane-provider-aws-appautoscaling, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, dbmate-fips, eksctl, envoy-gateway-fips, renovate,...
CVE-2026-54526 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: renovate, containerd, k3d, nerdctl, spire-server, helm, cert-manager, kots, kyverno, zot, k8s-device-plugin, falco-no-driver, trino, k3s, aactl, cilium, snyk-cli...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: renovate, containerd, k3d, nerdctl, spire-server, helm, cert-manager, kots, kyverno, zot, k8s-device-plugin, falco-no-driver, trino, k3s, aactl, cilium, snyk-cli...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: tileserver-gl, jitsucom-jitsu...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
AZL-95985 CVE-2026-47766 affecting package crun 1.24-6
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...
EUVD-2026-58714
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, livekit-cli, kyverno-notation-aws, mattermost-fips, porch-fips, prometheus-operator, kube-conformance, harvester-fips, crossplane-provider-aws-appautoscaling, helm-mapkubeapis, beats-fips, dapr,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, livekit-cli, crane, kube-conformance, crossplane-provider-aws-appautoscaling, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, linkerd2-fips, dbmate-fips, eksctl, envoy-gateway-fips,...
CVE-2026-56859 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, livekit-cli, kyverno-notation-aws, mattermost-fips, porch-fips, prometheus-operator, kube-conformance, harvester-fips, crossplane-provider-aws-appautoscaling, helm-mapkubeapis, beats-fips, dapr,...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, livekit-cli, crane, kube-conformance, crossplane-provider-aws-appautoscaling, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, linkerd2-fips, dbmate-fips, eksctl, envoy-gateway-fips,...
CVE-2026-63308 vulnerabilities
Vulnerabilities for packages: helm...
MAL-2026-14034 Malicious code in notafollower1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c74ec5369dac32115a9f5f257f512fa0a48d2e914b1f18c5178992b0a1604f9 package.json declares a postinstall script that automatically runs on npm install and fetches AWS ECS container task metadata via the...