GO-2025-4233 vulnerabilities

Vulnerabilities for packages: spegel, k3s, coredns, kubernetes-dns-node-cache-fips, buf, seaweedfs, dkron-fips, kargo, spegel-fips, traefik-fips, kubo-fips, seaweedfs-fips, frp, dkron, ipfs-cluster-fips, rke2-runtime, syncthing-fips, ipfs-cluster, caddy-fips, eks-distro-fips, q, teleport, caddy,...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: gitaly, coredns, vault-k8s, spire-server, buf, vault, jaeger-fips, opentelemetry-operator, http-echo, nats-top, kyverno-fips, fuse-overlayfs-snapshotter, argo-cd, flux-fips, prometheus-elasticsearch-exporter, zabbix-agent2, net-kourier-fips, kiali-fips,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, flyte, aws-node-termination-handler-fips, elastic-agent, headlamp, headlamp-fips, fulcio-fips, metrics-server-fips, k6-operator-fips, kaniko, zot, k3d, cloud-provider-aws-fips, minio, velero-fips, datadog-agent, rke2-cloud-provider, falcosidekick,...

GO-2026-4868 vulnerabilities

Vulnerabilities for packages: gitaly, coredns, vault-k8s, spire-server, buf, vault, jaeger-fips, opentelemetry-operator, http-echo, nats-top, kyverno-fips, fuse-overlayfs-snapshotter, argo-cd, flux-fips, prometheus-elasticsearch-exporter, zabbix-agent2, net-kourier-fips, kiali-fips,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: authservice, crossplane-provider-aws-rds-fips, swagger, sftpgo-plugin-kms, aws-node-termination-handler-fips, amazon-ecs-agent-fips, yunikorn-k8shim-fips, secrets-store-csi-driver-provider-aws, elastic-agent, spegel-fips, openbao-fips, k8s-metacollector,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: gitaly, coredns, spire-server, vault, jaeger-fips, external-dns, kyverno-fips, elastic-agent, kine, cluster-autoscaler-fips, libnvidia-container-fips, fuse-overlayfs-snapshotter, cilium-cli, gosu, etcd, argo-cd, flux-fips, prometheus-elasticsearch-exporter,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, crossplane-provider-aws-rds-fips, flyte, newrelic-k8s-metrics-adapter-fips, yunikorn-k8shim-fips, crossplane-provider-aws-cloudwatchevents, crossplane-provider-aws-scheduler, crossplane-provider-aws-elbv2, elastic-agent, opa-fips-envoy, openbao-fip...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: authservice, ld-relay, seaweedfs-rocksdb, versitygw-fips, crossplane-provider-aws-rds-fips, flyte, newrelic-k8s-metrics-adapter-fips, aws-node-termination-handler-fips, amazon-ecs-agent-fips, yunikorn-k8shim-fips, crossplane-provider-aws-cloudwatchevents,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: authservice, jupyterhub-k8s-image-awaiter-fips, ld-relay, opentelemetry-collector, seaweedfs-rocksdb, versitygw-fips, cloudzero-agent-fips, crossplane-provider-aws-rds-fips, memstress-fips, flyte, newrelic-k8s-metrics-adapter-fips, aws-node-termination-handler-fips,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, kubernetes-dns-node-cache-fips, spire-server, conftest, vault, external-dns, elastic-agent, headlamp, helm-diff, kine, argo-rollouts-fips, mc, fuse-overlayfs-snapshotter, cilium-cli, headlamp-fips, gosu, etcd,...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: authservice, vault-k8s, crossplane-provider-aws-rds-fips, swagger, sftpgo-plugin-kms, aws-privateca-issuer, db-operator, secrets-store-csi-driver-provider-aws, elastic-agent, headlamp, kbld-fips, spegel-fips, k8s-metacollector, kube-oidc-proxy,...

PT-2026-73234

Name of the Vulnerable Software and Affected Versions pfSense Plus versions prior to 26.07 Description The wg4 driver fails to verify if the MAC verification step succeeded after receiving a decryption result from OCF. This allows the driver to silently accept packets containing an invalid Poly13...

CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20

CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...

CVE-2026-62994 affecting package coredns for versions less than 1.11.4-20

CVE-2026-62994 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...

Photon OS 5.0: Coredns PHSA-2026-5.0-90-0869

An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0869. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLEANSTART-2026-CX88441 Security fixes in coredns 1.14.1-r1

Package coredns version 1.14.1-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-25679, CVE-2026-27139, CVE-2026-27138, CVE-2026-27137...

CLEANSTART-2026-IW59751 Security fixes in coredns 1.14.1-r0

Package coredns version 1.14.1-r0 fixes 2 vulnerabilities: CVE-2025-61732, CVE-2025-68121...

CLEANSTART-2026-ML98617 Security fixes in coredns 1.14.2-r1

Package coredns version 1.14.2-r1 fixes 13 vulnerabilities: CVE-2026-32282, CVE-2026-32289, CVE-2026-33810, CVE-2026-27144, CVE-2026-27143...

CLEANSTART-2026-CF63541 Security fixes in eks-distro-coredns-fips 1.35.7-r0

Package eks-distro-coredns-fips version 1.35.7-r0 fixes 6 vulnerabilities: ghsa-cfpf-hrx2-8rv6, ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, CVE-2025-68156, CVE-2026-24051...

OESA-2026-3184 coredns security update

CoreDNS is a fast and flexible DNS server. The key word here is flexible: with CoreDNS you are able to do what you want with your DNS data by utilizing plugins. Security Fixes: CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in...