GO-2026-5039 vulnerabilities

Vulnerabilities for packages: snyk-cli, kubescape-operator, spicedb-operator, harbor-registry, gomplate, terraform-provider-acme, sftpgo-plugin-auth, temporal-server, haproxy-ingress, gitlab-runner, temporal-ui-server, crossplane-provider-azure-authorization, kots,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, kine, cilium-cli, spicedb-operator, loki, kube-fluentd-operator, cert-manager, kube-rbac-proxy, kustomize, containerd, kyverno, flux-kustomize-controller, aactl, rabbitmq-messaging-topology-operator, fscrypt, k8s-device-plugin, cilium,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: trillian, gomplate, wireguard-go, chartmuseum, haproxy-ingress, skaffold, kots, flux-kustomize-controller, flux, kube-state-metrics, bom, prometheus-pushgateway, cue, k3d, flux-source-controller, runc, memcached-exporter, gobuster, pulumi-language-dotnet, k3s,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, cilium-cli, trino, istio, kots, kube-fluentd-operator, cert-manager, argo-cd, containerd, kyverno, libnvidia-container, aactl, mattermost, aws-flb-kinesis, aws-flb-firehose, zot, k8s-device-plugin, cilium, flux, minio, datadog-agent, prometheus,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, kine, external-secrets-operator, gitlab-kas, cilium-cli, gitlab-pages, istio, kots, kube-fluentd-operator, cert-manager, ingress-nginx-controller, argo-cd, kyverno, libnvidia-container, aactl, mattermost, fscrypt, aws-flb-kinesis,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, crane, sftpgo-plugin-auth, certificate-transparency, haproxy-ingress, temporal-server, kots, minify, argo-workflows, container-object-storage-interface, harbor-scanner-trivy, libnvidia-container, aws-otel-collector, cloud-sql-proxy,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, crane, sftpgo-plugin-auth, certificate-transparency, haproxy-ingress, temporal-server, kots, minify, argo-workflows, container-object-storage-interface, harbor-scanner-trivy, renovate, libnvidia-container, petname, aws-otel-collector,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubescape-operator, nginx-prometheus-exporter, calico, docker-credential-gcr, kubernetes-dns-node-cache, harbor-registry, sftpgo-plugin-auth, temporal-ui-server, gitlab-runner, ferretdb, ghaudit, rancher-loglevel, container-object-storage-interface, rancher-telemetry...

GO-2024-3106 vulnerabilities

Vulnerabilities for packages: fq, terraform-provider-aws, crane, skaffold, velero-plugin-for-aws, ghaudit, minify, wazero, flux-kustomize-controller, nri-cassandra, neuvector-scanner, minio-operator, go, mkcert, yam, kube-bench, restic, gobuster, distribution, nri-mongodb, wgcf, docker,...

RHEL 8 : container-tools:rhel8 (RHSA-2026:51288)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51288 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...

MiracleLinux 9 : runc-1.4.2-2.el9_8 (AXSA:2026-1427:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1427:03 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient...

Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...

SUSE-SU-2026:3433-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: When masking directories with maskPaths, runc will now re- use ...

SUSE-SU-2026:3428-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: When masking directories with maskPaths, runc will now re- use ...

Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...

CLEANSTART-2026-PE23465 Security fixes in runc 1.4.2-r1

Package runc version 1.4.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-CX82241 Security fixes in runc 1.1.14-r0

Package runc version 1.1.14-r0 fixes 40 vulnerabilities: ghsa-vvgc-356p-c3xw, CVE-2026-25679, CVE-2025-22873, CVE-2025-22872, CVE-2025-22871...

CLEANSTART-2026-RY09164 Security fixes in runc 1.4.2-r0

Package runc version 1.4.2-r0 fixes 14 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506, CVE-2026-25680...

SUSE SLES16 Security Update : runc (SUSE-SU-2026:22942-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22942-1 advisory. Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations...

CVE-2026-41579

A flaw was found in runc, a tool used to run containers. A malicious container image, crafted with a specific type of symbolic link in its /dev directory, can deceive runc. This deception could lead to the deletion of certain files or the creation of predefined symbolic links on the host system...