GO-2025-3900 vulnerabilities

Vulnerabilities for packages: beats-fips, grafana-fips, tkn-fips, istio-fips, mattermost-fips, jitsucom-bulker, k9s-fips, rancher-security-scan, gitlab-cng-fips, beats, bank-vaults, ratify-fips, kyverno, boring-registry-fips, pluto-fips, zitadel, neuvector-sigstore-interface-fips, grafana,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, localstack, flux-fips, stakater-reloader, nova-fips, cluster-autoscaler-fips, dkron, grafana-fips, cert-manager-fips, polaris, aws-ebs-csi-driver-fips, pluto, victoriametrics, victoriametrics-cluster-fips, flux-notification-controller,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, pluto, victoriametrics, victoriametrics-cluster, dkron, flux-helm-controller, terragrunt, metacontroller, flux-image-reflector-controller, nova, flux-source-controller, grafana-operator, flux-image-automation-controller, podinfo, go,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, pluto, victoriametrics, victoriametrics-cluster, dkron, flux-helm-controller, terragrunt, metacontroller, flux-image-reflector-controller, nova, flux-source-controller, grafana-operator, flux-image-automation-controller, podinfo, go,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: flux, pluto, rancher-helm, kots, zot, flux-helm-controller, chart-testing, helm-operator, flux-source-controller, zarf, eksctl, chartmuseum, k9s, cert-manager-cmctl, kubescape, helm-docs, tw, helm-push, k8ssandra-client, cilium-cli, trivy, cluster-api-helm-controller...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: flux, pluto, rancher-helm, kots, zot, flux-helm-controller, chart-testing, helm-operator, flux-source-controller, zarf, eksctl, chartmuseum, k9s, cert-manager-cmctl, kubescape, helm-docs, tw, helm-push, k8ssandra-client, cilium-cli, trivy, cluster-api-helm-controller...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: flux, k8sgpt, pluto, helm-set-status, trivy-operator, kots, cerbos, zot, flux-helm-controller, linkerd2, chart-testing, helm-operator, nova, flux-source-controller, zarf, envoy-gateway, eksctl, chartmuseum, headlamp, k9s, rancher-fleet, cert-manager-cmctl, kubescape,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k8sgpt, pluto, rancher-helm, kots, cerbos, zot, flux-helm-controller, linkerd2, chart-testing, helm-operator, flux-source-controller, zarf, envoy-gateway, eksctl, chartmuseum, k9s, rancher-fleet, cert-manager-cmctl, helm-docs, tw, helm-push, k8ssandra-client, kargo,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: argo-events, pluto, rancher-system-agent, terraform-provider-azapi, k3s, nats-server-config-reloader, conftest, nri-memcached, src, neuvector-sigstore-interface, aws-privateca-issuer, kubernetes-csi-external-health-monitor, chart-testing, ipfs-cluster,...

SUSE CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

Libreswan 4.6 < 5.3.1 DoS

The version of Libreswan installed on the remote host is between 4.6 and 5.3.1 exclusive. It is, therefore, affected by a denial of service vulnerability. An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. The function reassemblev2incomingfragments would...

EUVD-2026-41439

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

Linux Distros Unpatched Vulnerability : CVE-2026-12413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The functi...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

DEBIAN-CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

UBUNTU-CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

The CVE-2026-12413 issue affects Libreswan’s pluto daemon and is triggered by an invalidly formatted IKEv2 fragment. The root cause is an off-by-one error in the assertion within reassemble_v2_incoming_fragments(), which can cause the daemon to abort when handling certain outer payloads that are ...