78 matches found
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, containerd-fips, rke2-runtime, podman, calico-fips, istio-fips, nerdctl-fips, docker-fips, amazon-k8s-cni-fips, flannel, multus-cni, istio, rootlesskit, flannel-fips, k3s, buildah, buildkitd, rootlesskit-fips, datadog-agent, containerd, nerdctl,...
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: datadog-agent, containerd, docker, istio, k3s, podman, buildkitd, calico, flannel, buildah, azure-ipam, multus-cni, kuma, nerdctl, rootlesskit...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3, argo-events, cloud-provider-azure, wuzz, pinact, crossplane-provider-aws-kms, grafana-operator, kubevela, kubernetes, conjur-cli, newrelic-nri-kube-events, datadog-agent, mattermost, tetragon, gogatekeeper, q, kots, newrelic-nri-statsd,...
CLEANSTART-2026-RM33874 Security fixes in multus-cni-fips 4.3.0-r1
Package multus-cni-fips version 4.3.0-r1 fixes 1 vulnerabilities: CVE-2026-27145...
CLEANSTART-2026-TZ19908 Security fixes in multus-cni-fips 4.1.4-r4
Package multus-cni-fips version 4.1.4-r4 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-UW06838 Security fixes in multus-cni-fips 4.2.3-r1
Package multus-cni-fips version 4.2.3-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-SV56553 Security fixes in multus-cni-fips 4.0.2-r3
Package multus-cni-fips version 4.0.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CVE-2026-56852 affecting package multus for versions less than 4.0.2-10
CVE-2026-56852 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...
CVE-2026-42502 affecting package multus for versions less than 4.0.2-9
CVE-2026-42502 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...
CVE-2026-25681 affecting package multus for versions less than 4.0.2-9
CVE-2026-25681 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...
CVE-2026-25680 affecting package multus for versions less than 4.0.2-9
CVE-2026-25680 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...
SUSE CVE-2026-13434
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434
CVE-2026-13434 affects KubeVirt’s network annotation generator used when provisioning VirtualMachineInstance with Multus networks. The flaw writes the supplied networkName verbatim into the v1.multus-cni.io/default-network annotation without format validation or sanitization, with only an empty-s...
CVE-2026-13434 Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
EUVD-2026-39796
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
PT-2026-52848
Name of the Vulnerable Software and Affected Versions KubeVirt versions 1.8.0 and later Description A flaw exists in the network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the networkName value is written directly into the launcher...