278 matches found
GHSA-MJCV-P78Q-W5FW vulnerabilities
Vulnerabilities for packages: containerd, rke2-runtime, crossplane-function-kcl-fips, kubevirt-cdi-uploadserver-fips, gosu, neuvector, chaos-mesh, docker-fips, envoy-gateway-fips, k8s-image-swapper-fips, kubevirt-cdi-uploadserver, docker, newrelic-infrastructure-agent, crossplane-function-kcl,...
CVE-2026-61801 vulnerabilities
Vulnerabilities for packages: containerd, rke2-runtime, crossplane-function-kcl-fips, kubevirt-cdi-uploadserver-fips, gosu, neuvector, chaos-mesh, docker-fips, envoy-gateway-fips, k8s-image-swapper-fips, kubevirt-cdi-uploadserver, docker, newrelic-infrastructure-agent, crossplane-function-kcl,...
GHSA-MJCV-P78Q-W5FW vulnerabilities
Vulnerabilities for packages: act, gosu, containerd, newrelic-infrastructure-agent, ctop, runc, scorecard, k3d, docker, vcluster, xeol, k3s, undock, datadog-agent, zarf, neuvector-scanner, dagger...
CVE-2026-61801 vulnerabilities
Vulnerabilities for packages: act, gosu, containerd, newrelic-infrastructure-agent, ctop, runc, scorecard, k3d, docker, vcluster, xeol, k3s, undock, datadog-agent, zarf, neuvector-scanner, dagger...
GO-2026-6597 vulnerabilities
Vulnerabilities for packages: kaniko, buildkitd, kargo, manifest-tool, docker-compose, rancher-agent, headlamp, syft, zarf, neuvector-scanner, docker-cli-buildx, kubescape, helm-mapkubeapis, chartmuseum, newrelic-infrastructure-agent, trivy, scorecard, trivy-operator, helm-push, docker, gatekeepe...
GO-2026-6165 vulnerabilities
Vulnerabilities for packages: rke2-runtime, telegraf, kubo, kubo-fips, spegel, ipfs-cluster, rke2-runtime-fips, ipfs-cluster-fips, livekit-egress, spegel-fips, k3s...
GO-2026-6163 vulnerabilities
Vulnerabilities for packages: op-geth, rke2-runtime, kubo, kubo-fips, spegel, ipfs-cluster, rke2-runtime-fips, ipfs-cluster-fips, stunnerd, livekit-egress, spegel-fips, k3s...
GO-2026-6099 vulnerabilities
Vulnerabilities for packages: rke2-runtime, kubo, spegel, ipfs-cluster, rke2-runtime-fips, ipfs-cluster-fips, spegel-fips, k3s...
GO-2026-6238 vulnerabilities
Vulnerabilities for packages: containerd, rke2-runtime, agentbeat-fips, cilium, nerdctl-fips, kuma, virt-handler, kubescape-operator, docker-fips, elastic-agent, prometheus, envoy-gateway-fips, nerdctl, hubble, docker, cilium-fips, milvus, kubescape-operator-fips, kubescape-server,...
GO-2026-6163 vulnerabilities
Vulnerabilities for packages: op-geth, kubo, k3s, ipfs-cluster, spegel...
GO-2026-6165 vulnerabilities
Vulnerabilities for packages: kubo, telegraf, k3s, ipfs-cluster, spegel...
GO-2026-6099 vulnerabilities
Vulnerabilities for packages: ipfs-cluster, kubo, spegel, k3s...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, kubeflow-pipelines, spqr, kyverno-notation-aws, kwok, rancher-agent, yunikorn-k8shim, hubble-ui, cluster-api-azure-controller, kube-vip-cloud-provider, tkn, metallb, apisix-ingress-controller, external-secrets-operator,...
BIT-ETCD-2026-73500 etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: containerd, falco-no-driver, cilium, nemo, prometheus-mongodb-exporter, trino, nerdctl, commercial-expanso-edge, reports-server, kube-conformance, upwind-agent, snyk-cli, terraform, k3d, renovate, aactl, kyverno, kots, helm, langfuse-fips, spire-server, k3s, zot,...
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: containerd, falco-no-driver, cilium, nemo, prometheus-mongodb-exporter, trino, nerdctl, commercial-expanso-edge, reports-server, kube-conformance, upwind-agent, snyk-cli, terraform, k3d, renovate, aactl, kyverno, kots, helm, langfuse-fips, spire-server, k3s, zot,...
GO-2026-6179 vulnerabilities
Vulnerabilities for packages: containerd, falco-no-driver, cilium, nemo, prometheus-mongodb-exporter, trino, nerdctl, commercial-expanso-edge, reports-server, kube-conformance, upwind-agent, snyk-cli, terraform, k3d, renovate, aactl, kyverno, kots, helm, langfuse-fips, spire-server, k3s, zot,...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: containerd, falco-no-driver, cilium, nemo, prometheus-mongodb-exporter, trino, nerdctl, commercial-expanso-edge, reports-server, kube-conformance, upwind-agent, snyk-cli, terraform, k3d, renovate, aactl, kyverno, kots, helm, langfuse-fips, spire-server, k3s, zot,...