CVE-2026-42506 affecting package multus for versions less than 4.0.2-8

CVE-2026-42506 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...

CVE-2026-27136 affecting package multus for versions less than 4.0.2-8

CVE-2026-27136 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...

AZL-88095 CVE-2026-39821 affecting package multus for versions less than 4.0.2-8

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

AZL-88104 CVE-2026-42506 affecting package multus for versions less than 4.0.2-8

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88107 CVE-2026-42502 affecting package multus for versions less than 4.0.2-9

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88113 CVE-2026-27136 affecting package multus for versions less than 4.0.2-8

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88110 CVE-2026-25681 affecting package multus for versions less than 4.0.2-9

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88098 CVE-2026-25680 affecting package multus for versions less than 4.0.2-9

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CVE-2025-47911 affecting package multus for versions less than 4.0.2-7

CVE-2025-47911 affecting package multus for versions less than 4.0.2-7. A patched version of the package is available...

CVE-2025-58190 affecting package multus for versions less than 4.0.2-7

CVE-2025-58190 affecting package multus for versions less than 4.0.2-7. A patched version of the package is available...

CVE-2025-47911 affecting package multus for versions less than 4.0.2-10

CVE-2025-47911 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...

CVE-2025-58190 affecting package multus for versions less than 4.0.2-10

CVE-2025-58190 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...

AZL-76965 CVE-2025-58190 affecting package multus for versions less than 4.0.2-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77040 CVE-2025-58190 affecting package multus for versions less than 4.0.2-7

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77036 CVE-2025-47911 affecting package multus for versions less than 4.0.2-7

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76962 CVE-2025-47911 affecting package multus for versions less than 4.0.2-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CLEANSTART-2026-EW68942 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DD39330 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

Azure Linux 3.0 Security Update: cni / containernetworking-plugins / keda / multus (CVE-2021-38561)

The version of cni / containernetworking-plugins / keda / multus installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-38561 advisory. - golang.org/x/text/language in golang.org/x/text before 0.3.7 can...

Azure Linux 3.0 Security Update: multus (CVE-2020-28852)

The version of multus installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-28852 advisory. - In x/text in Go before v0.3.5, a slice bounds out of range panic occurs in language.ParseAcceptLanguage whil...