GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: manifest-tool, docker-compose, falco-no-driver, chartmuseum, neuvector-scanner, syft, steampipe, trivy-operator, dagger, skaffold, helm-mapkubeapis, helm-set-status, scorecard, k8sgpt, kubescape, docker-cli-buildx, k9s, rancher-helm, fuse-overlayfs-snapshotter, kargo...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: manifest-tool, docker-compose, falco-no-driver, chartmuseum, neuvector-scanner, syft, steampipe, trivy-operator, dagger, skaffold, helm-mapkubeapis, helm-set-status, scorecard, k8sgpt, kubescape, docker-cli-buildx, k9s, rancher-helm, fuse-overlayfs-snapshotter, kargo...

Amazon Linux 2 : nerdctl (ALAS-2026-3903)

The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3903 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go o...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-2129)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2129 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kuma, k3s, docker, cilium, kubescape, splunk-otel-collector, hubble, vitess, hubble-ui, runc, containerd, witness, delve, nerdctl, falcoctl, gitaly...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kuma, k3s, docker, cilium, kubescape, splunk-otel-collector, hubble, vitess, hubble-ui, runc, containerd, witness, delve, nerdctl, falcoctl, gitaly...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kuma, k3s, docker, cilium, kubescape, splunk-otel-collector, hubble, vitess, hubble-ui, runc, containerd, witness, delve, nerdctl, falcoctl, gitaly...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: kyverno, prometheus-mongodb-exporter, nerdctl, terraform, k3d, commercial-expanso-edge, commercial-kyverno, nemo, k3s, cert-manager, spire-server, reports-server, zot, falco-no-driver, helm, commercial-grafana, langfuse-fips, upwind-agent, kube-conformance, renovate,...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: kyverno, prometheus-mongodb-exporter, nerdctl, terraform, k3d, commercial-expanso-edge, commercial-kyverno, nemo, k3s, cert-manager, spire-server, reports-server, zot, falco-no-driver, helm, commercial-grafana, langfuse-fips, upwind-agent, kube-conformance, renovate,...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: kyverno, prometheus-mongodb-exporter, nerdctl, terraform, k3d, commercial-expanso-edge, commercial-kyverno, nemo, k3s, cert-manager, spire-server, reports-server, zot, falco-no-driver, helm, commercial-grafana, langfuse-fips, upwind-agent, kube-conformance, renovate,...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: kyverno, prometheus-mongodb-exporter, nerdctl, terraform, k3d, commercial-expanso-edge, commercial-kyverno, nemo, k3s, cert-manager, spire-server, reports-server, zot, falco-no-driver, helm, commercial-grafana, langfuse-fips, upwind-agent, kube-conformance, renovate,...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: k3d, aactl, k3s, snyk-cli, cilium, helm, k8s-device-plugin, zot, kyverno, renovate, falco-no-driver, containerd, spire-server, trino, nerdctl, kots, cert-manager...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: k3d, aactl, k3s, snyk-cli, cilium, helm, k8s-device-plugin, zot, kyverno, renovate, falco-no-driver, containerd, spire-server, trino, nerdctl, kots, cert-manager...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: k3d, aactl, k3s, snyk-cli, cilium, helm, k8s-device-plugin, zot, kyverno, renovate, falco-no-driver, containerd, spire-server, trino, nerdctl, kots, cert-manager...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: k3d, aactl, k3s, snyk-cli, cilium, helm, k8s-device-plugin, zot, kyverno, renovate, falco-no-driver, containerd, spire-server, trino, nerdctl, kots, cert-manager...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: syft, kaniko, grype, k9s, kubescape, nerdctl, skopeo, docker, cadvisor, k3d, k3s, skaffold, runc, zot, podman, trivy, wolfictl, kots, newrelic-infrastructure-agent, kubernetes, buildkitd, ctop, zarf...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: syft, skopeo, kubernetes, skaffold, kubescape, kots, k9s, ctop, k3s, docker, podman, zarf, wolfictl, runc, zot, trivy, k3d, buildkitd, kaniko, cadvisor, newrelic-infrastructure-agent, nerdctl, grype...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: kuma, buildah, docker, istio, buildkitd, k3s, multus-cni, podman, azure-ipam, calico, rootlesskit, containerd, datadog-agent, nerdctl, flannel...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tflint, chezmoi, cluster-api-azure-controller, cloudflared, syft, cilium-cli, nfpm, step, kine, trivy-operator, atlantis, skaffold, crossplane-provider-aws-eks, crossplane-provider-aws-s3, crossplane-provider-azure-managedidentity, crossplane-provider-keycloak, wal-g...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, lazygit, manifest-tool, sftpgo-plugin-auth, container-object-storage-interface, newrelic-fluent-bit-output, ingress-nginx-controller, terraform-provider-pagerduty, kube-vip-cloud-provider, rancher-telemetry, spqr,...