CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: tfsec, aws-ebs-csi-driver, crossplane-provider-gcp-beta-compute-fips, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, crossplane-provider-aws-deploy, knative-client, authservice-fips,...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-deploy, kro, azure-metrics-exporter-fips, spegel, gcp-compute-persistent-disk-csi-driver-fips, thanos-operator, grafana-zipkin-datasource, crossplane-provider-aws-serverlessrepo, terraform-provider-grafana-fips, cert-exporter-fips,...

CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-deploy, kro, azure-metrics-exporter-fips, spegel, gcp-compute-persistent-disk-csi-driver-fips, thanos-operator, grafana-zipkin-datasource, crossplane-provider-aws-serverlessrepo, terraform-provider-grafana-fips, cert-exporter-fips,...

CVE-2026-56859 vulnerabilities

Vulnerabilities for packages: tfsec, aws-ebs-csi-driver, crossplane-provider-gcp-beta-compute-fips, cass-operator-fips-no-pvc-delete, terragrunt-fips, crossplane-function-environment-configs-fips, crossplane-provider-aws-deploy, knative-client, authservice-fips,...

CVE-2026-54526 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips...

GHSA-5GJX-96WQ-C8R2 vulnerabilities

Vulnerabilities for packages: helm...

CVE-2026-63308 vulnerabilities

Vulnerabilities for packages: helm...

GO-2023-1589 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

GO-2023-1832 vulnerabilities

Vulnerabilities for packages: zot...

GO-2026-5491 vulnerabilities

Vulnerabilities for packages: vale...

GO-2024-2982 vulnerabilities

Vulnerabilities for packages: vault...

GO-2025-4161 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, victorialogs-fips, victorialogs...

GO-2026-4768 vulnerabilities

Vulnerabilities for packages: vale...

GO-2026-4751 vulnerabilities

Vulnerabilities for packages: zitadel...

GO-2024-3113 vulnerabilities

Vulnerabilities for packages: vault...

GO-2024-3162 vulnerabilities

Vulnerabilities for packages: vault...

GO-2024-3246 vulnerabilities

Vulnerabilities for packages: vault...