GO-2026-6238 vulnerabilities

Vulnerabilities for packages: containerd, gitaly, nerdctl, delve, witness, hubble, splunk-otel-collector, kubescape, falcoctl, cilium, docker, k3s, hubble-ui, kubescape-operator, kuma, vitess...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: containerd, gitaly, nerdctl, delve, witness, hubble, splunk-otel-collector, kubescape, falcoctl, cilium, docker, k3s, hubble-ui, kubescape-operator, kuma, vitess...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: containerd, gitaly, nerdctl, delve, witness, hubble, splunk-otel-collector, kubescape, falcoctl, cilium, docker, k3s, hubble-ui, kubescape-operator, kuma, vitess...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: commercial-grafana, spire-server, k3s, containerd, terraform, kots, reports-server, k3d, snyk-cli, zot, aactl, nerdctl, kyverno, k8s-device-plugin, prometheus-mongodb-exporter...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: commercial-grafana, spire-server, k3s, containerd, terraform, kots, reports-server, k3d, snyk-cli, zot, aactl, nerdctl, kyverno, k8s-device-plugin, prometheus-mongodb-exporter...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: commercial-grafana, spire-server, k3s, containerd, terraform, kots, reports-server, k3d, snyk-cli, zot, aactl, nerdctl, kyverno, k8s-device-plugin, prometheus-mongodb-exporter...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: commercial-grafana, spire-server, k3s, containerd, terraform, kots, reports-server, k3d, snyk-cli, zot, aactl, nerdctl, kyverno, k8s-device-plugin, prometheus-mongodb-exporter...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, aactl, spire-server, kots, k3d, kyverno, snyk-cli, k3s, k8s-device-plugin, zot...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, aactl, spire-server, kots, k3d, kyverno, snyk-cli, k3s, k8s-device-plugin, zot...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, aactl, spire-server, kots, k3d, kyverno, snyk-cli, k3s, k8s-device-plugin, zot...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, aactl, spire-server, kots, k3d, kyverno, snyk-cli, k3s, k8s-device-plugin, zot...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: buildkitd, k9s, kots, ctop, k3d, syft, skopeo, docker, grype, newrelic-infrastructure-agent, k3s, wolfictl, runc, nerdctl, trivy, kubescape, kubernetes, zot, kaniko, zarf, podman, skaffold, cadvisor...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: runc, nerdctl, trivy, kubescape, skopeo, docker, buildkitd, k3s, podman, kubernetes, zot, skaffold, syft, wolfictl, k9s, zarf, grype, cadvisor, kots, k3d, kaniko, newrelic-infrastructure-agent, ctop...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: containerd, azure-ipam, datadog-agent, flannel, nerdctl, podman, istio, multus-cni, docker, buildkitd, k3s, rootlesskit, calico, kuma, buildah...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cosign, nerdctl, crossplane-provider-aws-ec2, crossplane-provider-aws-memorydb, istio, kubescape, docker, snyk-cli, k3s, crossplane-provider-family-azure, caddy, podman, terraform-provider-acme, falcoctl, helm, zot, apko, crossplane-provider-aws-elasticache, skaffold...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: amass, cosign, conftest, docker-credential-ecr-login, actions-runner-controller, crossplane-provider-aws-ec2, nerdctl, opensearch-k8s-operator, stakater-reloader, gitleaks, swagger, litefs, juicefs, k3s, bank-vaults, calico, kuma,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: containerd, prometheus-operator, kots, k3d, kine, minio, loki, k3s, terraform, cilium, cert-manager, snyk-cli, nerdctl, backup-restore-operator, kyverno, elastic-agent-fips, spire-server, commercial-expanso-edge, omnictl-multiarch, kaf, prometheus, reports-server,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: containerd, minio, nerdctl, aactl, kaf, flux, spire-server, kots, k3d, prometheus-operator, kyverno, loki, snyk-cli, k3s, telegraf, kine, zot...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-1908)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1908 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, . to execute repeatedly on the same...

Medium: nerdctl

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...