157 matches found
CVE-2026-54250
K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, 1.34.6+k3s1, v1.33.10+k3s1, a path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names can be written to...
CVE-2026-54250 K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, 1.34.6+k3s1, v1.33.10+k3s1, a path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names can be written to...
CVE-2026-54250
K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, 1.34.6+k3s1, v1.33.10+k3s1, a path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names can be written to...
CVE-2026-40898 vulnerabilities
Vulnerabilities for packages: q, kube-metrics-adapter, dkron, k3s, coredns, kargo, kubernetes-dns-node-cache, jitsucom-bulker, k8sgateway, prometheus-blackbox-exporter, teleport, opentelemetry-operator, kubo, spegel, kyverno-policy-reporter, frp, kyverno-policy-reporter-ui, traefik, ipfs-cluster...
CVE-2026-42508 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, mattermost, containerd, k3s, gitsign, istio, argo-events, prometheus, telegraf, terragrunt, guac...
CVE-2026-42508 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, argo-cd-fips, gatekeeper, argocd-image-updater, zitadel, k3s, knative-kafka-broker-fips, etcd, mattermost-fips, containerd, commercial-grafana, argo-cd, commercial-expanso-edge, telegraf, terragrunt, knative-kafka-broker, omnictl-multiarch-fips,...
CVE-2026-39825 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis, cert-manager, kots, go, nerdctl, k3s, kubernetes-dashboard, argo-cd, juicefs, cilium-cli, istio, grafana, kubernetes, karpenter, fluent-bit-plugin-loki, flux, grafana-alloy, coredns, helm, trino, dask-gateway, kubevela, zarf, aactl, kaf,...
CVE-2026-39825 vulnerabilities
Vulnerabilities for packages: hubble, ansible-operator, azuredisk-csi-fips, knative-operator-fips, kubevela, cluster-autoscaler-fips, libnvidia-container-fips, terraform, go-slim, kube-conformance, keda, opentelemetry-collector-contrib-fips, istio-fips, kubevela-fips, mattermost-fips, authentik,...
GHSA-XQ5J-9R39-C3VF vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, kubevela, kube-conformance, opentelemetry-operator-fips, kong-ingress-controller-fips, crossplane-provider-aws-s3-fips, crossplane-provider-aws-acm-fips, elastic-agent, yunikorn-k8shim-fips, crossplane-fips,...
GHSA-P9H5-JM8X-MJM5 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, kubevela, kube-conformance, opentelemetry-operator-fips, kong-ingress-controller-fips, crossplane-provider-aws-s3-fips, crossplane-provider-aws-acm-fips, elastic-agent, yunikorn-k8shim-fips, crossplane-fips,...
CVE-2026-42499 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, kubevela, kube-conformance, opentelemetry-operator-fips, kong-ingress-controller-fips, crossplane-provider-aws-s3-fips, crossplane-provider-aws-acm-fips, elastic-agent, yunikorn-k8shim-fips, crossplane-fips,...
CVE-2026-39820 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, kubevela, kube-conformance, opentelemetry-operator-fips, kong-ingress-controller-fips, crossplane-provider-aws-s3-fips, crossplane-provider-aws-acm-fips, elastic-agent, yunikorn-k8shim-fips, crossplane-fips,...
GHSA-497X-JCXF-M478 vulnerabilities
Vulnerabilities for packages: tempo, kubernetes-csi-external-attacher, grafana, spqr, fluent-bit-plugin-loki, otel-cli, grafana-alloy, litestream, mesosphere-vsphere-csi, tkn, dask-gateway, gitaly, trino, cloud-provider-azure, buildah, minio-object-browser, rancher-webhook, dagger, kaf, conjur-cl...
CVE-2026-33811 vulnerabilities
Vulnerabilities for packages: tempo, kubernetes-csi-external-attacher, grafana, spqr, fluent-bit-plugin-loki, otel-cli, grafana-alloy, litestream, mesosphere-vsphere-csi, tkn, dask-gateway, gitaly, trino, cloud-provider-azure, buildah, minio-object-browser, rancher-webhook, dagger, kaf, conjur-cl...
GHSA-P9H5-JM8X-MJM5 vulnerabilities
Vulnerabilities for packages: timestamp-authority, kubernetes-csi-external-attacher, grafana, fluent-bit-plugin-loki, grafana-alloy, trino, tkn, dask-gateway, cloud-provider-azure, buildah, minio-object-browser, rancher-webhook, rabbitmq-cluster-operator, kaf, scorecard, hubble, atlantis,...
CVE-2026-39820 vulnerabilities
Vulnerabilities for packages: timestamp-authority, kubernetes-csi-external-attacher, grafana, fluent-bit-plugin-loki, grafana-alloy, trino, tkn, dask-gateway, cloud-provider-azure, buildah, minio-object-browser, rancher-webhook, rabbitmq-cluster-operator, kaf, scorecard, hubble, atlantis,...
CVE-2026-42328 vulnerabilities
Vulnerabilities for packages: spegel, ipfs-cluster, k3s...
GHSA-W239-58X2-Q8P5 vulnerabilities
Vulnerabilities for packages: spegel, ipfs-cluster, k3s...