CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: telegraf, frankenphp-8.5, kubernetes, crossplane-cli-fips, commercial-expanso-edge, opentelemetry-collector, omnictl-multiarch-fips, gitea, flux-source-controller, argocd-image-updater, drone, fscrypt, omnictl-multiarch, kubescape, chisel-fips, flux-fips,...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: kubevela, kine, prometheus-operator, containerd, spire-server, fscrypt, aactl, flux-source-controller, rancher-agent, gitness, snyk-cli, sftpgo, flux, falco-no-driver, rclone, skaffold, k3s, opentelemetry-collector, kubernetes, external-dns, kubescape, k9s, minio,...

GO-2026-6303 vulnerabilities

Vulnerabilities for packages: kubevela, kine, prometheus-operator, containerd, spire-server, fscrypt, aactl, flux-source-controller, rancher-agent, gitness, snyk-cli, sftpgo, flux, falco-no-driver, rclone, skaffold, k3s, opentelemetry-collector, kubernetes, external-dns, kubescape, k9s, minio,...

AZL-98385 CVE-2026-37236 affecting package moby-containerd-cc for versions less than 1.7.7-17

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:3783-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3783-1 advisory. This update for containerd rebuilds it against the current go security release. Tenable has extracted the preceding...

GO-2026-6278 vulnerabilities

Vulnerabilities for packages: cilium-fips, kubevela, infinispan-operator, kube-conformance, cloudflared-fips, emissary, kubernetes, verticadb-operator, verticadb-operator-fips, amazon-ssm-agent, gpu-operator-fips, milvus, virt-controller-fips, virt-launcher, cosmo-router, plutono-fips, cloudflare...

Security update for containerd

This update for containerd rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...

SUSE-SU-2026:3783-1 Security update for containerd

This update for containerd rebuilds it against the current go security release...

PT-2026-85459

This update for containerd rebuilds it against the current go security release...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:3670-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3670-1 advisory. This update for containerd rebuilds it against the current go security release. Tenable has extracted the preceding...

Security update for containerd

This update for containerd rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...

SUSE-SU-2026:3670-1 Security update for containerd

This update for containerd rebuilds it against the current go security release...

PT-2026-83769

This update for containerd rebuilds it against the current go security release...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: k3s, cilium-fips, falcoctl-fips, nerdctl, envoy-gateway, hubble-fips, opentelemetry-ebpf-instrumentation, milvus, kubescape-server-fips, cosmo-router, hubble-ui, gitaly-fips, runc, falcoctl, hubble-ui-backend-fips, containerd, hubble, beats-fips, nerdctl-fips, kuma,...

PT-2026-79115

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0...

ROS-20260820-73-0009

The vulnerability in containerd is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...

BuildKit has a possible runtime DoS via unbounded group parsing

Impact Maliciously crafted base image or build can cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory OOM kill of the buildkitd process. Patches Issue is fixed in BuildKit v0.31.1+ Workarounds Use trusted build...

ROS-20260819-73-0045

The vulnerability in containerd is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kubescape, splunk-otel-collector, hubble-ui, cilium, containerd, hubble, vitess, delve, falcoctl, gitaly, k3s, docker, witness, runc, nerdctl, kuma...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kubescape, splunk-otel-collector, hubble-ui, cilium, containerd, hubble, vitess, delve, falcoctl, gitaly, k3s, docker, witness, runc, nerdctl, kuma...