GO-2026-6238 vulnerabilities

Vulnerabilities for packages: hubble, kuma, runc, splunk-otel-collector, witness, containerd, hubble-ui, docker, kubescape-operator, vitess, cilium, falcoctl, gitaly, delve, k3s, kubescape, nerdctl...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: hubble, kuma, runc, splunk-otel-collector, witness, containerd, hubble-ui, docker, kubescape-operator, vitess, cilium, falcoctl, gitaly, delve, k3s, kubescape, nerdctl...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: hubble, kuma, runc, splunk-otel-collector, witness, containerd, hubble-ui, docker, kubescape-operator, vitess, cilium, falcoctl, gitaly, delve, k3s, kubescape, nerdctl...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: aactl, nemo, terraform, k8s-device-plugin, snyk-cli, k3s, falco-no-driver, containerd, k3d, kyverno, zot, langfuse-fips, langfuse, kots, reports-server, spire-server, nerdctl, commercial-grafana, kube-conformance, prometheus-mongodb-exporter, upwind-agent...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: aactl, nemo, terraform, k8s-device-plugin, snyk-cli, k3s, falco-no-driver, containerd, k3d, kyverno, zot, langfuse-fips, langfuse, kots, reports-server, spire-server, nerdctl, commercial-grafana, kube-conformance, prometheus-mongodb-exporter, upwind-agent...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: aactl, nemo, terraform, k8s-device-plugin, snyk-cli, k3s, falco-no-driver, containerd, k3d, kyverno, zot, langfuse-fips, langfuse, kots, reports-server, spire-server, nerdctl, commercial-grafana, kube-conformance, prometheus-mongodb-exporter, upwind-agent...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: aactl, nemo, terraform, k8s-device-plugin, snyk-cli, k3s, falco-no-driver, containerd, k3d, kyverno, zot, langfuse-fips, langfuse, kots, reports-server, spire-server, nerdctl, commercial-grafana, kube-conformance, prometheus-mongodb-exporter, upwind-agent...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: k3d, snyk-cli, containerd, kots, spire-server, zot, aactl, k8s-device-plugin, k3s, falco-no-driver, nerdctl, kyverno...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: k3d, snyk-cli, containerd, kots, spire-server, zot, aactl, k8s-device-plugin, k3s, falco-no-driver, nerdctl, kyverno...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: k3d, snyk-cli, containerd, kots, spire-server, zot, aactl, k8s-device-plugin, k3s, falco-no-driver, nerdctl, kyverno...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: k3d, snyk-cli, containerd, kots, spire-server, zot, aactl, k8s-device-plugin, k3s, falco-no-driver, nerdctl, kyverno...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: buildkitd, k9s, docker, cadvisor, runc, k3s, grype, kubescape, k3d, newrelic-infrastructure-agent, zot, skopeo, kots, kaniko, nerdctl, trivy, zarf, syft, wolfictl, kubernetes, skaffold, ctop, podman...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: trivy, newrelic-infrastructure-agent, buildkitd, k3d, kots, zot, k3s, zarf, nerdctl, cadvisor, grype, skopeo, kaniko, wolfictl, kubernetes, podman, k9s, runc, syft, docker, ctop, skaffold, kubescape...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: kuma, flannel, azure-ipam, istio, datadog-agent, calico, containerd, docker, buildkitd, podman, rootlesskit, k3s, buildah, multus-cni, nerdctl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cilium-cli, cloud-provider-aws, crossplane-provider-aws-s3, pulumi-kubernetes-operator, rancher-machine, terraform-provider-azurerm, crossplane-provider-azure-storage, crossplane-provider-aws-sns, crossplane-provider-aws-rds, terraform-provider-azapi,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cilium-cli, cloud-provider-aws, crossplane-provider-aws-s3, kube-bench, rancher-machine, cluster-api-gcp-controller, tofu-controller, crossplane-provider-aws-sns, crossplane-provider-aws-rds, spire-controller-manager, hubble-ui, guac, headlamp,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: aactl, cilium, cert-manager, commercial-expanso-edge, terraform, elastic-agent-fips, omnictl-multiarch-fips, snyk-cli, k3s, prometheus, containerd, k3d, kyverno, zot, backup-restore-operator, omnictl-multiarch, kots, reports-server, spire-server, kine, zitadel,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: minio, kaf, k3d, kine, telegraf, snyk-cli, containerd, kots, spire-server, loki, aactl, zot, flux, k3s, prometheus-operator, nerdctl, kyverno...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-1908)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1908 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, . to execute repeatedly on the same...

Medium: nerdctl

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...