github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input

A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service DoS by providing...

github.com/containerd/containerd: containerd: Arbitrary code execution via CRI checkpoint image tag poisoning

A flaw was found in containerd, an open-source container runtime. The CRI Container Runtime Interface checkpoint import process fails to validate image references within a checkpoint image's configuration. An attacker with permissions to create pods can exploit this by using a specially crafted...

github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands o...

Security Bulletin: Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation

Summary A validation bypass existed in the flow component code verification mechanism. The custom component policy enforcement validated only the main component code field but did not extend validation to dynamic CodeInput fields used by the Policies component. An authenticated user could craft a...

@grackle-ai/cli (>=0.82.2, <=0.132.2), @grackle-ai/powerline (>=0.82.2, <=0.132.2) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.2)

@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.2 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIRUNTIMESDK-17817938...

@grackle-ai/cli (>=0.82.2, <=0.132.1), @grackle-ai/powerline (>=0.82.2, <=0.132.1) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.1)

@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...

UBUNTU-CVE-2026-54891

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tlsgenconnection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data. The...

OpenClaw: Slack and Zalo webhook secrets could remain active after secrets.reload

Summary Slack and Zalo webhook secrets could remain active after secrets.reload. In affected versions, a caller with an old webhook secret during the stale-secret window could keep accepting the previous secret after secrets.reload. This advisory is scoped to the named feature and configuration. ...

CVE-2026-54887

Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...

EUVD-2026-41410

Observable Response Discrepancy vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory. The SSHFXPREALPATH handler in sshsftpd calls relatefilename/3 with Canonicalize=false, unlik...

GHSA-V6R2-JH58-XX6W OpenClaw's marketplace runtime extension metadata could point at unscanned payloads

Summary Marketplace runtime extension metadata could point at unscanned payloads. In affected versions, a package selected for installation by a trusted operator could redirect runtime loading toward hidden package content that was not scanned as expected. This advisory is scoped to the named...

OpenClaw's marketplace runtime extension metadata could point at unscanned payloads

Summary Marketplace runtime extension metadata could point at unscanned payloads. In affected versions, a package selected for installation by a trusted operator could redirect runtime loading toward hidden package content that was not scanned as expected. This advisory is scoped to the named...

GHSA-X7XJ-JVWP-97RV vulnerabilities

Vulnerabilities for packages: rke2-runtime, rke2-runtime-fips...

CVE-2023-26248 vulnerabilities

Vulnerabilities for packages: rke2-runtime, rke2-runtime-fips, k3s...

GHSA-MQR9-HJR8-2M9W vulnerabilities

Vulnerabilities for packages: rke2-runtime, rke2-runtime-fips, k3s...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, azurefile-csi, kubernetes-csi-driver-hostpath, azuredisk-csi, longhorn-share-manager-fips, harvester, eks-distro, longhorn-manager, cluster-autoscaler-fips, longhorn-manager-fips, azurefile-csi-fips, longhorn-share-manager, rancher-system-agent,...

GHSA-R56H-J38W-HRQQ vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, azurefile-csi, kubernetes-csi-driver-hostpath, azuredisk-csi, longhorn-share-manager-fips, harvester, eks-distro, longhorn-manager, cluster-autoscaler-fips, longhorn-manager-fips, azurefile-csi-fips, longhorn-share-manager, rancher-system-agent,...

PT-2026-55271

Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 25.3 through 29.0.2 Erlang/OTP versions 28.x prior to 28.5.0.3 Erlang/OTP versions 27.x prior to 27.3.4.14 ssl versions 10.9 through 11.7.2 ssl versions 11.6.x prior to 11.6.0.3 ssl versions 11.2.x prior to 11.2.12.10...

Linux Distros Unpatched Vulnerability : CVE-2026-53340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If...

Linux Distros Unpatched Vulnerability : CVE-2026-54786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those before 44.0.3;...