107 matches found
GHSA-PG57-6JWG-Q645 vulnerabilities
Vulnerabilities for packages: kargo, newrelic-infrastructure-agent, rancher-agent, trivy-operator, spegel, gatekeeper, kubevela, cluster-api-helm-controller, buildkitd, manifest-tool, kaniko, kube-arangodb, fuse-overlayfs-snapshotter, kubescape-operator, rancher, headlamp, skaffold, nerdctl, zot,...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: kargo, newrelic-infrastructure-agent, rancher-agent, trivy-operator, spegel, gatekeeper, kubevela, cluster-api-helm-controller, buildkitd, manifest-tool, kaniko, kube-arangodb, fuse-overlayfs-snapshotter, kubescape-operator, rancher, headlamp, skaffold, nerdctl, zot,...
Amazon Linux 2023 : nerdctl (ALAS2023-2026-2129)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2129 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such...
Medium: nerdctl
Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...
Medium: nerdctl
Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...
Amazon Linux 2 : nerdctl (ALAS-2026-3903)
The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3903 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go o...
GO-2026-6238 vulnerabilities
Vulnerabilities for packages: delve, containerd, vitess, nerdctl, splunk-otel-collector, kubescape, docker, runc, gitaly, falcoctl, hubble-ui, kuma, cilium, kubescape-operator, hubble, witness, k3s...
GHSA-XHGW-QWWF-PG32 vulnerabilities
Vulnerabilities for packages: delve, containerd, vitess, nerdctl, splunk-otel-collector, kubescape, docker, runc, gitaly, falcoctl, hubble-ui, kuma, cilium, kubescape-operator, hubble, witness, k3s...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: delve, containerd, vitess, nerdctl, splunk-otel-collector, kubescape, docker, runc, gitaly, falcoctl, hubble-ui, kuma, cilium, kubescape-operator, hubble, witness, k3s...
GO-2026-6179 vulnerabilities
Vulnerabilities for packages: falco-no-driver, commercial-grafana, langfuse-fips, terraform, cilium, upwind-agent, zot, trino, k3d, k3s, nerdctl, commercial-kyverno, reports-server, prometheus-mongodb-exporter, commercial-expanso-edge, nemo, renovate, kyverno, containerd, kots, k8s-device-plugin,...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: falco-no-driver, commercial-grafana, langfuse-fips, terraform, cilium, upwind-agent, zot, trino, k3d, k3s, nerdctl, commercial-kyverno, reports-server, prometheus-mongodb-exporter, commercial-expanso-edge, nemo, renovate, kyverno, containerd, kots, k8s-device-plugin,...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: falco-no-driver, commercial-grafana, langfuse-fips, terraform, cilium, upwind-agent, zot, trino, k3d, k3s, nerdctl, commercial-kyverno, reports-server, prometheus-mongodb-exporter, commercial-expanso-edge, nemo, renovate, kyverno, containerd, kots, k8s-device-plugin,...
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: falco-no-driver, commercial-grafana, langfuse-fips, terraform, cilium, upwind-agent, zot, trino, k3d, k3s, nerdctl, commercial-kyverno, reports-server, prometheus-mongodb-exporter, commercial-expanso-edge, nemo, renovate, kyverno, containerd, kots, k8s-device-plugin,...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: k3s, cert-manager, falco-no-driver, containerd, renovate, nerdctl, trino, zot, k8s-device-plugin, kyverno, spire-server, kots, cilium, k3d, helm, aactl, snyk-cli...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: k3s, cert-manager, falco-no-driver, containerd, renovate, nerdctl, trino, zot, k8s-device-plugin, kyverno, spire-server, kots, cilium, k3d, helm, aactl, snyk-cli...
GO-2026-6179 vulnerabilities
Vulnerabilities for packages: k3s, cert-manager, falco-no-driver, containerd, renovate, nerdctl, trino, zot, k8s-device-plugin, kyverno, spire-server, kots, cilium, k3d, helm, aactl, snyk-cli...
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: k3s, cert-manager, falco-no-driver, containerd, renovate, nerdctl, trino, zot, k8s-device-plugin, kyverno, spire-server, kots, cilium, k3d, helm, aactl, snyk-cli...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: grype, skaffold, wolfictl, cadvisor, newrelic-infrastructure-agent, runc, zot, syft, docker, k3d, k3s, podman, nerdctl, buildkitd, kubernetes, zarf, k9s, trivy, kubescape, kots, ctop, skopeo, kaniko...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, buildkitd, cadvisor, kaniko, k3d, podman, kubernetes, skaffold, nerdctl, zot, kubescape, syft, kots, k9s, grype, docker, runc, trivy, zarf, wolfictl, skopeo, k3s, ctop...