Argo CD 信息泄露漏洞

Argo CD is an open-source tool developed by Argo for Kubernetes, designed for declarative GitOps continuous delivery. Versions of Argo CD prior to 3.2.11 and 3.3.0–3.3.9 contained a vulnerability related to information leakage. This vulnerability stemmed from a lack of authorization and data...

Important Photon OS Security Update - PHSA-2026-4.0-1012

Updates of 'etcd', 'vim' packages of Photon OS have been released...

RHCOS 3 : kubernetes (RHSA-2015:1945)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1945 advisory. - Kubernetes: Missing name validation allows path traversal in etcd CVE-2015-5305 Note that Nessus has not tested for this issue but has...

PT-2026-38402

Name of the Vulnerable Software and Affected Versions etcd versions prior to 3.4.44 etcd versions prior to 3.5.30 etcd versions prior to 3.6.11 Description etcd is a distributed key-value store for distributed system data. A flaw allows authenticated users without sufficient read or lease-related...

Photon OS 5.0: Etcd PHSA-2026-5.0-0802

An update of the etcd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: gitness, external-dns, dapr, kyverno-policy-reporter-kyverno-plugin, kubernetes-dashboard-web, litestream, sftpgo-plugin-geoipfilter, smarter-device-manager, kyverno-notation-aws, promxy, k8sgpt-operator, minio-object-browser, knative-eventing,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: gitness, external-dns, dapr, kyverno-notation-aws, cloudprober, kapp, k6, knative-eventing, metallb, octo-sts, cosign, crossplane-provider-aws-sns, grafana-alloy, argo-cd, traefik, argo-workflows, policy-controller, crossplane-provider-aws-iam, dagdotdev,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, dex, percona-server-mongodb-operator-fips, eksctl, tempo, ceph-csi-operator, opa, kube-arangodb, kserve, crossplane-provider-azure-storagecache, kcp, crossplane-provider-aws-rds-fips, crossplane-provider-aws-kinesis,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, dex, percona-server-mongodb-operator-fips, eksctl, tempo, ceph-csi-operator, opa, kube-arangodb, kserve, crossplane-provider-azure-storagecache, kcp, crossplane-provider-aws-rds-fips, crossplane-provider-aws-kinesis,...

GO-2026-4808 Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd

Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd...

GO-2026-4806 Authorization bypasses in multiple APIs in go.etcd.io/etcd

Authorization bypasses in multiple APIs in go.etcd.io/etcd...

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33817

Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0802

Updates of 'python3', 'python3-pyOpenSSL', 'libpng', 'strongswan', 'python3-requests', 'nghttp2', 'sqlite', 'glibc', 'rubygem-activesupport', 'etcd', 'python3-Pygments' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-0802

Updates of 'rubygem-activesupport', 'etcd', 'glibc', 'nghttp2', 'strongswan', 'python3-Pygments', 'sqlite', 'python3-requests', 'python3-pyOpenSSL', 'libpng', 'python3' packages of Photon OS have been released...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2026-33343)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33343 advisory. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2026-33413)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33413 advisory. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions...