GO-2026-6238 vulnerabilities

Vulnerabilities for packages: hubble-fips, elastic-agent-fips, envoy-gateway, falcoctl, beats, elastic-agent, cosmo-router-fips, agentbeat-fips, gitaly-fips, kubescape-operator-fips, nerdctl, docker, kubescape-server-fips, opentelemetry-ebpf-instrumentation, milvus, docker-fips, kuma, k3s,...

BuildKit has a possible runtime DoS via unbounded group parsing

Impact Maliciously crafted base image or build can cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory OOM kill of the buildkitd process. Patches Issue is fixed in BuildKit v0.31.1+ Workarounds Use trusted build...

ROS-20260819-73-0045

The vulnerability in containerd is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: hubble-ui, splunk-otel-collector, k3s, kubescape, nerdctl, vitess, witness, cilium, falcoctl, kubescape-operator, gitaly, kuma, docker, hubble, containerd, delve...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: hubble-ui, splunk-otel-collector, k3s, kubescape, nerdctl, vitess, witness, cilium, falcoctl, kubescape-operator, gitaly, kuma, docker, hubble, containerd, delve...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-2063)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2063 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...

Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2026-117 (ALASNITRO-ENCLAVES-2026-117)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-117 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable h...

Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2026-139 (ALASDOCKER-2026-139)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-139 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: hubble-fips, elastic-agent-fips, envoy-gateway, falcoctl, beats, elastic-agent, cosmo-router-fips, agentbeat-fips, gitaly-fips, kubescape-operator-fips, nerdctl, docker, kubescape-server-fips, opentelemetry-ebpf-instrumentation, milvus, docker-fips, kuma, k3s,...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: hubble-fips, elastic-agent-fips, envoy-gateway, falcoctl, beats, elastic-agent, cosmo-router-fips, agentbeat-fips, gitaly-fips, kubescape-operator-fips, nerdctl, docker, kubescape-server-fips, opentelemetry-ebpf-instrumentation, milvus, docker-fips, kuma, k3s,...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Issue Correction: Run dnf update containerd --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2063 --releasever 2023.12.202608...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and thi...

GO-2025-3646 vulnerabilities

Vulnerabilities for packages: rke2-runtime, rke2-runtime-fips, k3s...

GO-2025-3748 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

GO-2025-3391 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GO-2024-2771 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: vault-fips, grafana-fips, consul-fips, elastic-agent-fips, zot, elastic-agent, beats, frankenphp-8.5, mattermost, fuse-overlayfs-snapshotter, grafana, consul, frankenphp-8.2, kine, commercial-expanso-edge, k3s, frankenphp-8.4, rke2-runtime-fips, rke2-runtime, loki,...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips, argo-workflows...

GO-2025-4240 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim-fips, node-feature-discovery, argo-cd-fips, longhorn-share-manager-fips, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache, argocd-image-updater-fips, calico-fips, azuredisk-csi-fips, calico, rancher-webhook, local-static-provisioner,...