177841 matches found
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: snyk-cli, falco-no-driver, k3s, nerdctl, k3d, kots, zot, kyverno, aactl, containerd, spire-server, k8s-device-plugin...
CVE-2026-56858 vulnerabilities
Vulnerabilities for packages: go-discover, gogatekeeper, golangci-lint, kuma, kserve-modelmesh-serving, flux-notification-controller, helm-operator, secrets-store-csi-driver-provider-azure, podinfo, knative-eventing, slsa-verifier, rancher-machine, task, external-secrets-operator, kwok, dagdotdev...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: sbom-scorecard, gogatekeeper, kuma, delve, secrets-store-csi-driver-provider-azure, slsa-verifier, task, external-secrets-operator, helm-set-status, kyverno-policy-reporter, runc, cluster-api-azure-controller, tetragon, step-issuer, dgraph,...
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: gogatekeeper, kuma, victoriametrics-cluster, delve, secrets-store-csi-driver-provider-azure, slsa-verifier, vale, task, external-secrets-operator, helm-set-status, spegel, kyverno-policy-reporter, runc, cluster-api-azure-controller, tetragon, step-issuer,...
CVE-2026-45699
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...
CVE-2026-45699
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47192
kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...
CVE-2026-47191
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
CVE-2026-47192
kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...
CVE-2026-47191
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-58224
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache-fips, whereabouts-fips, cluster-proportional-vertical-autoscaler, kserve-localmodelnode-agent-fips, maru, crossplane-provider-aws-secretsmanager, helm, cosmo-router, cilium-certgen-fips, versitygw-fips, secrets-store-csi-driver-provider-aws,...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: vcluster, kubernetes-dns-node-cache-fips, longhorn-instance-manager, grept-fips, skaffold, crossplane-provider-family-aws-fips, chartmuseum-fips, crossplane-provider-aws-neptune, whereabouts-fips, authservice, crossplane-aws-provider,...
CVE-2026-56859 vulnerabilities
Vulnerabilities for packages: vcluster, kubernetes-dns-node-cache-fips, longhorn-instance-manager, grept-fips, skaffold, crossplane-provider-family-aws-fips, chartmuseum-fips, crossplane-provider-aws-neptune, whereabouts-fips, authservice, crossplane-aws-provider,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache-fips, whereabouts-fips, cluster-proportional-vertical-autoscaler, kserve-localmodelnode-agent-fips, maru, crossplane-provider-aws-secretsmanager, helm, cosmo-router, cilium-certgen-fips, versitygw-fips, secrets-store-csi-driver-provider-aws,...