GO-2025-4100 vulnerabilities

Vulnerabilities for packages: tw, kaniko, k9s, containerd, melange, cert-manager-cmctl, k8ssandra-client, xeol, helm-set-status, envoy-gateway, manifest-tool, osv-scanner, skaffold, wolfictl, helm-push, zarf, neuvector-scanner, dagger, grype, steampipe, ctop, headlamp, opa, k3s,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: istio, buildkitd, rootlesskit, containerd, buildah, docker, calico, multus-cni, nerdctl, datadog-agent, azure-ipam, kuma, flannel, podman, k3s...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: opentofu, k3s, falco-no-driver, istio, kyverno, prometheus, guac, external-secrets-operator, containerd, argo-cd, telegraf, helm, terragrunt, mattermost, argocd-image-updater, argo-events, gitsign...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer, gh, kubernetes-dashboard, seaweedfs, renovate, infinispan-operator, pulumi-language-java, zarf, runc, k6, opentelemetry-collector-contrib, fuse-overlayfs-snapshotter, telegraf, opentelemetry-collector, syft, pulumi-language-yaml,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: grafana-alloy, hubble, prometheus, containerd, kaf, kubernetes-dashboard, kubo, redka, aws-flb-firehose, datadog-agent, go, fluent-bit-plugin-loki, zarf, cert-manager, trino, knative-serving, kube-fluentd-operator, runc, prometheus-operator, karma, karpenter,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, chisel, prometheus, k9s, containerd, kaf, kubernetes-dashboard, skaffold, osv-scanner, argocd-image-updater, rancher, zarf, cert-manager, cilium, prometheus-operator, docker-machine-driver-harvester, k3s, falco-no-driver, istio, external-dns,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, prometheus, containerd, kaf, kubernetes-dashboard, rancher, cert-manager, cilium, buildah, prometheus-operator, k3s, falco-no-driver, istio, external-dns, rancher-agent, docker-cli-buildx, spire-server, kots, telegraf, helm, mattermost,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, sigstore-scaffolding, pulumi-kubernetes-operator, opentofu, zarf, crossplane-provider-azure-sql, jitsucom-bulker, vertical-pod-autoscaler, portieris, crossplane-provider-aws-lambda, crossplane-provider-aws-cloudformation, eksctl, velero-plugin-for-aws...

Photon OS 5.0: Containerd PHSA-2025-5.0-91-0682

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0682. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Containerd PHSA-2025-5.0-91-0611

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0611. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Containerd PHSA-2026-5.0-90-0855

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLES12 Security Update : containerd (SUSE-SU-2026:3504-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3504-1 advisory. - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266. Tenable has extracted t...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.321 Vulnerability Details CVEID:CVE-2026-48815 DESCRIPTION: sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateOIDs option in...

Security update for containerd

This update for containerd fixes the following issues: CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

SUSE-SU-2026:3504-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266...

Photon OS 5.0: Containerd PHSA-2023-5.0-91-0010

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0010. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:3450-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3450-1 advisory. - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of...

Security update for containerd

This update for containerd fixes the following issues: CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

SUSE-SU-2026:3450-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service bsc1262266...

Fedora 44 : pack (2026-8729dce4b8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8729dce4b8 advisory. Security update to pack 0.40.8 Fixes CVE-2024-25621: containerd - local privilege escalation Fixes CVE-2025-47913: golang.org/x/crypto/ssh/agent - S...