CVE-2026-73643 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, renovate...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: kots, containerd, falco-no-driver, k3d, nerdctl, k8s-device-plugin, kyverno, zot, snyk-cli, spire-server, k3s, aactl...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: kots, containerd, falco-no-driver, k3d, nerdctl, k8s-device-plugin, kyverno, zot, snyk-cli, spire-server, k3s, aactl...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: kots, containerd, falco-no-driver, k3d, nerdctl, k8s-device-plugin, kyverno, zot, snyk-cli, spire-server, k3s, aactl...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: kots, containerd, falco-no-driver, k3d, nerdctl, k8s-device-plugin, kyverno, zot, snyk-cli, spire-server, k3s, aactl...

CVE-2026-56858 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, crossplane-provider-keycloak, cilium, trillian, crossplane-provider-aws-kms, envconsul, splunk-otel-collector, helm-operator, cloudflared, juicefs-csi-driver, knative-eventing, kserve-rest-proxy, cluster-autoscaler, grafana-rollout-operator,...

CVE-2026-73569 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: helm-operator, cluster-autoscaler, flux-kustomize-controller, pgtimetable, dataplaneapi, tigera-operator, pulumi-kubernetes-operator, spark-operator, bento, gitlab-runner, amazon-cloudwatch-agent-operator, rancher, yq, slsa-verifier, azurefile-csi, cilium-certgen,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: envconsul, helm-operator, cluster-autoscaler, flux-kustomize-controller, pgtimetable, nri-nginx, dataplaneapi, q, nginx-prometheus-exporter, tigera-operator, malcontent, pulumi-kubernetes-operator, spark-operator, bento, direnv, gitlab-runner,...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47192

kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...

CVE-2026-47191

kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...

CVE-2026-47192

kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...

CVE-2026-47191

kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache-fips, whereabouts-fips, cluster-proportional-vertical-autoscaler, kserve-localmodelnode-agent-fips, maru, crossplane-provider-aws-secretsmanager, helm, cosmo-router, cilium-certgen-fips, versitygw-fips, secrets-store-csi-driver-provider-aws,...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes-dns-node-cache-fips, longhorn-instance-manager, grept-fips, skaffold, crossplane-provider-family-aws-fips, chartmuseum-fips, crossplane-provider-aws-neptune, whereabouts-fips, authservice, crossplane-aws-provider,...