266 matches found
GO-2026-4441 vulnerabilities
Vulnerabilities for packages: k3s, wuzz, k8s-device-plugin, gitness, fuse-overlayfs-snapshotter, runc, aws-load-balancer-controller...
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: k3s, frp, spegel, kubernetes-dns-node-cache, cloudflared, buf, caddy, q...
GO-2026-4440 vulnerabilities
Vulnerabilities for packages: k3s, wuzz, k8s-device-plugin, gitness, fuse-overlayfs-snapshotter, runc, aws-load-balancer-controller...
GO-2026-5021 vulnerabilities
Vulnerabilities for packages: k3s, gitsign, argo-events, mattermost, istio, containerd, external-secrets-operator, guac, telegraf, prometheus, argocd-image-updater, terragrunt, falco-no-driver...
GO-2024-3305 vulnerabilities
Vulnerabilities for packages: k3s, amazon-cloudwatch-agent-operator, rancher-agent, promxy, kubevela, pulumi...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: buildah, flux-kustomize-controller, crossplane-provider-keycloak, crossplane-provider-aws-sns, tkn, spire-server, crossplane-provider-aws-cloudwatchlogs, falco-no-driver, argo-cd, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudformation,...
GO-2026-4610 vulnerabilities
Vulnerabilities for packages: policy-controller, gh, istio, lazydocker, flux-kustomize-controller, rke2-cloud-provider, vault-secrets-webhook, vitess, flux-helm-controller, spire-server, dive, crossplane, traefik, rancher-fleet, xeol, kubescape-operator, gitsign, kbld, tekton-chains, flux, nerdct...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: helm-set-status, lazydocker, oauth2-proxy, envconsul, tkn, wire-go, glow, headlamp, kuberlr, ratify, cloud-sql-proxy, nodetaint, migrate, step-kms-plugin, controller-gen, nri-f5, terraform, ini-file, nri-redis, trivy, rabbitmq-cluster-operator, portieris, conftest,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: flux-source-controller, policy-controller, terraform-provider-azurerm, gh, flux-kustomize-controller, kubernetes-event-exporter, grafana-mimir, snyk-cli, tkn, falcoctl, flux-helm-controller, spire-server, crossplane-provider-azure, fulcio, neuvector-sigstore-interfac...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: commercial-grafana, flux, cert-manager, prometheus, loki, nerdctl, zot, k3s, reports-server, telegraf, terraform, elastic-agent-fips, minio, k3d, prometheus-operator, backup-restore-operator, cilium, spire-server, kine, containerd, omnictl-multiarch, snyk-cli, kyvern...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: k3s, kots, flux, containerd, kaf, kine, kyverno, nerdctl, snyk-cli, spire-server, telegraf, zot, prometheus-operator, minio, aactl, k3d, loki...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: spegel, kubo, rke2-runtime-fips, ipfs-cluster, k3s, rke2-runtime, spegel-fips, ipfs-cluster-fips...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: spegel, kubo, rke2-runtime-fips, ipfs-cluster, k3s, rke2-runtime, spegel-fips, ipfs-cluster-fips...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: k3s, spegel, kubo, ipfs-cluster...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: k3s, spegel, kubo, ipfs-cluster...
GO-2026-5973 K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression in github.com/k3s-io/k3s
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression in github.com/k3s-io/k3s. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
EUVD-2026-39512
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression...
GHSA-JXR7-MQHW-9P98 K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...