306 matches found
CLEANSTART-2025-IZ48257 kubectl cp command allows copying files between containers and the user machine
Security vulnerability affects the k3s package. The kubectl cp command allows copying files between containers and the user machine...
CLEANSTART-2025-AS71068 Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced
Security vulnerability affects the k3s package. The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced...
CLEANSTART-2025-RW12960 Kubernetes kube-controller-manager in versions v1
Security vulnerability affects the k3s package. The Kubernetes kube-controller-manager in versions v1...
CLEANSTART-2025-CH37035 vulnerability was found in all versions of containernetworking/plugins before version 0
Security vulnerability affects the k3s package. A vulnerability was found in all versions of containernetworking/plugins before version 0...
CLEANSTART-2025-SV39817 Kubernetes kubelet component in versions 1
Security vulnerability affects the k3s package. The Kubernetes kubelet component in versions 1...
CLEANSTART-2025-WI16713 In containerd (an industry-standard container runtime) before versions 1
Security vulnerability affects the k3s package. In containerd an industry-standard container runtime before versions 1...
CLEANSTART-2025-PR73528 runc before 1
Security vulnerability affects the k3s package. runc before 1...
CLEANSTART-2025-AT28198 K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material (cluster certificate authority privat...
Security vulnerability affects the k3s package. K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material cluster certificate authority private keys, secrets encryption configuration passphrase,...
CLEANSTART-2025-SC39439 OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go
Security vulnerability affects the k3s package. OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go...
CVE-2026-63209 vulnerabilities
Vulnerabilities for packages: helm, k3s, kine, snyk-cli, falco-no-driver, reports-server, commercial-kyverno, nerdctl, containerd, minio, aactl, elastic-agent-fips, backup-restore-operator, kyverno, spire-server, loki, prometheus-mongodb-exporter, telegraf, cilium, flux, prometheus,...
CVE-2026-63209 vulnerabilities
Vulnerabilities for packages: aactl, prometheus-operator, k3d, k3s, telegraf, spire-server, kaf, kine, falco-no-driver, minio, loki, snyk-cli, containerd, kyverno, flux, zot, helm, nerdctl, kots...
GHSA-VWCJ-R8V9-P53F vulnerabilities
Vulnerabilities for packages: k8s-device-plugin, prometheus-operator, hugo, cert-manager, k3s, gitea, kubernetes, caddy, k6, cilium-cli, mailpit, telegraf, rclone, spire-server, step-issuer, kaf, kine, falco-no-driver, minio, loki, step-ca, snyk-cli, containerd, kyverno, opentelemetry-collector,...
GHSA-75PG-WVH3-34JR vulnerabilities
Vulnerabilities for packages: k8s-device-plugin, hydra, fq, prometheus-operator, hugo, cert-manager, k3s, gitea, kubernetes, crossplane-provider-aws-cloudfront, caddy, crossplane-provider-aws-sqs, gitness, crossplane-provider-aws-memorydb, crossplane-provider-aws-eks, crossplane-provider-aws-kms,...
CVE-2026-97045 vulnerabilities
Vulnerabilities for packages: helm, kube-conformance, caddy, frankenphp-8.2, k3s, nemo-skills, kine, rclone, gitaly, snyk-cli, hugo-fips, falco-no-driver, gitea-fips, reports-server, fuse-overlayfs-snapshotter, mailpit, nerdctl, minio, k6-fips, k8s-device-plugin, step-issuer, step-issuer-fips,...
GO-2026-6866 vulnerabilities
Vulnerabilities for packages: helm, kube-conformance, caddy, frankenphp-8.2, k3s, nemo-skills, kine, rclone, gitaly, snyk-cli, hugo-fips, falco-no-driver, gitea-fips, reports-server, fuse-overlayfs-snapshotter, mailpit, nerdctl, minio, k6-fips, k8s-device-plugin, step-issuer, step-issuer-fips,...
CVE-2026-78661 vulnerabilities
Vulnerabilities for packages: k8s-device-plugin, hydra, fq, prometheus-operator, hugo, cert-manager, k3s, gitea, kubernetes, crossplane-provider-aws-cloudfront, caddy, crossplane-provider-aws-sqs, gitness, crossplane-provider-aws-memorydb, crossplane-provider-aws-eks, crossplane-provider-aws-kms,...
GO-2026-6860 vulnerabilities
Vulnerabilities for packages: k8s-device-plugin, hydra, fq, prometheus-operator, hugo, cert-manager, k3s, gitea, kubernetes, crossplane-provider-aws-cloudfront, caddy, crossplane-provider-aws-sqs, gitness, crossplane-provider-aws-memorydb, crossplane-provider-aws-eks, crossplane-provider-aws-kms,...
GO-2026-6866 vulnerabilities
Vulnerabilities for packages: k8s-device-plugin, prometheus-operator, hugo, cert-manager, k3s, gitea, kubernetes, caddy, k6, cilium-cli, mailpit, telegraf, rclone, spire-server, step-issuer, kaf, kine, falco-no-driver, minio, loki, step-ca, snyk-cli, containerd, kyverno, opentelemetry-collector,...
CVE-2026-97045 vulnerabilities
Vulnerabilities for packages: k8s-device-plugin, prometheus-operator, hugo, cert-manager, k3s, gitea, kubernetes, caddy, k6, cilium-cli, mailpit, telegraf, rclone, spire-server, step-issuer, kaf, kine, falco-no-driver, minio, loki, step-ca, snyk-cli, containerd, kyverno, opentelemetry-collector,...