GO-2026-5841 vulnerabilities

Vulnerabilities for packages: reports-server, zot, elastic-agent-fips, zitadel, nerdctl, backup-restore-operator, omnictl-multiarch-fips, kine, commercial-expanso-edge, kots, kyverno, k3s, terraform, flux, loki, containerd, prometheus-operator, omnictl-multiarch, kaf, aactl, snyk-cli, cert-manage...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: commercial-nginx-ingress, spicedb-operator, zitadel, flux-kustomize-controller, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, prometheus-redis-exporter, omni-fips, gitlab-operator-fips, envconsul-fips, sftpgo-plugin-eventsearch, seaweedfs-operator...

GO-2026-4894 vulnerabilities

Vulnerabilities for packages: k3s...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: kine, fuse-overlayfs-snapshotter, k3s, loki, zot, containerd, datadog-agent...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, flux-source-controller, helm-mapkubeapis, k9s, kaniko, helm-operator, tw, kots, docker-compose, k8ssandra-client, k8sgpt, steampipe, spegel, ctop, fuse-overlayfs-snapshotter, k3s, kargo, chartmuseum, grype, dagger, helm, gogatekeeper,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: istio, multus-cni, azure-ipam, podman, buildkitd, rootlesskit, flannel, k3s, nerdctl, buildah, kuma, docker, containerd, calico, datadog-agent...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: prometheus, istio, terragrunt, gitsign, guac, k3s, external-secrets-operator, argo-events, mattermost, telegraf, argocd-image-updater, containerd...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: cosign, runc, kyverno, cluster-api-azure-controller, cadvisor, terraform-provider-google, rabbitmq-messaging-topology-operator, cilium, step-issuer, flux-notification-controller, rancher-fleet, kyverno-policy-reporter, flux-image-reflector-controller, spire-server,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: runc, coredns, kyverno, juicefs, dask-gateway, go, aws-flb-kinesis, telegraf, argo-cd, kubernetes, kots, hubble, karpenter, istio, libnvidia-container, k3s, nerdctl, zot, helm, cilium, k8s-device-plugin, kaf, aactl, kubevela, mattermost, kubernetes-dashboard, karma,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: fscrypt, kyverno, telegraf, kubernetes, rancher, kots, cloud-provider-aws, k3s, nerdctl, zot, helm, cilium, kaf, aactl, mattermost, gitlab-kas, kubernetes-dashboard, podman, kine, snyk-cli, external-dns, docker-cli-buildx, external-secrets-operator,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: fscrypt, kyverno, flux-source-controller, k9s, telegraf, kubernetes, rancher, kots, argocd-image-updater, cloud-provider-aws, chisel, flux-image-automation-controller, docker-machine-driver-harvester, k3s, nerdctl, zot, helm, skaffold, cilium, kaf, aactl, mattermost,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, terraform-provider-acme, spark-operator, kube-vip, apko, rabbitmq-messaging-topology-operator, src-fingerprint, policy-controller, temporal-ui-server, kapp, rancher-fleet, flux-image-reflector-controller, kwok, hydra, eksctl,...

Astra Linux – Vulnerability in containerd-app

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to a Denial-of-Service DoS attack if an attacker provides specially crafted HTML content...

Astra Linux – Vulnerability in containerd-app

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to a Denial-of-Service DoS attack if an attacker provides specially crafted HTML content...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.321 Vulnerability Details CVEID:CVE-2026-48815 DESCRIPTION: sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateOIDs option in...

Security update for containerd

This update for containerd fixes the following issues: CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:3450-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3450-1 advisory. - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of...

Security update for containerd

This update for containerd fixes the following issues: CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

SUSE-SU-2026:3450-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266...

Fedora 44 : pack (2026-8729dce4b8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8729dce4b8 advisory. Security update to pack 0.40.8 Fixes CVE-2024-25621: containerd - local privilege escalation Fixes CVE-2025-47913: golang.org/x/crypto/ssh/agent - S...