CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: helm, kine, knative-serving, snyk-cli, docker-cli-buildx, rancher, podman, rancher-agent, mattermost, cilium-cli, cloud-provider-aws, flux, prometheus-operator, buildah, kaf, loki, fscrypt, prometheus, teleport, aactl, k3s, kyverno, nerdctl, cert-manager, zot,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: helm, kine, knative-serving, snyk-cli, podman, mattermost, cilium-cli, cloud-provider-aws, flux, prometheus-operator, trivy, kaf, kubescape, fscrypt, loki, pulumi-language-dotnet, scorecard, pulumi-language-java, nuclei, prometheus, wolfictl,...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, docker-cli-buildx, fulcio, cilium-cli, cloud-provider-aws, ko, sops, kaf, pulumi-language-dotnet, crossplane-provider-aws-lambda, cluster-api-azure-controller, k8sgpt, zarf, openbao, terraform-provider-tls, gitea, gitlab-kas, ksops,...

CVE-2026-39828 vulnerabilities

Vulnerabilities for packages: helm, kine, knative-serving, snyk-cli, rancher, rancher-agent, mattermost, cilium-cli, cloud-provider-aws, flux, prometheus-operator, trivy, kaf, kubescape, fscrypt, loki, prometheus, aactl, k3s, kyverno, nerdctl, cert-manager, osv-scanner, zarf, zot, gitea,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: kots, fulcio, crossplane-provider-azure-storage, crossplane-provider-azure-orbital, neuvector-sigstore-interface-fips, knative-eventing-fips, opentelemetry-collector, ksops, crossplane-provider-azure-servicelinker, gitea, terragrunt-fips, nemo,...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector, gitea, terragrunt-fips, nemo, flux-image-automation-controller, spire-server, gatus, helm, knative-serving-fips, terragrunt, trufflehog-fips, redpanda-console, gptscript, cloudbeat, cilium, kubescape-server-fips, mapotf, wal-g, skaffold...

CVE-2026-39832 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector, gitea, terragrunt-fips, nemo, flux-image-automation-controller, spire-server, helm, knative-serving-fips, terragrunt, trufflehog-fips, redpanda-console, gptscript, cloudbeat, cilium, kubescape-server-fips, mapotf, skaffold, step-issuer,...

CVE-2026-46595 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector, gitea, nemo, flux-image-automation-controller, spire-server, helm, knative-serving-fips, kubescape-server-fips, cloudbeat, cilium, skaffold, kubescape, cilium-cli, k9s-fips, argocd-image-updater-fips, kubernetes, coder,...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector, nemo, spire-server, helm, knative-serving-fips, cilium, cilium-cli, kubernetes, prometheus-operator, kyverno-fips, prometheus-mongodb-exporter, buildah, frankenphp-8.5, opentofu-fips, k3s, zot, frankenphp-8.3, docker-cli-buildx,...

CVE-2026-46598 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector, nemo, spire-server, helm, knative-serving-fips, cilium, terraform-fips, cilium-cli, kubernetes, prometheus-operator, kyverno-fips, prometheus-mongodb-exporter, buildah, frankenphp-8.5, opentofu-fips, k3s, zot, frankenphp-8.3,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector, gitea, terragrunt-fips, nemo, flux-image-automation-controller, spire-server, helm, knative-serving-fips, terragrunt, trufflehog-fips, redpanda-console, gptscript, cloudbeat, cilium, kubescape-server-fips, mapotf, skaffold, kubescape,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: kots, fulcio, crossplane-provider-azure-storage, crossplane-provider-azure-orbital, neuvector-sigstore-interface-fips, knative-eventing-fips, opentelemetry-collector, ksops, crossplane-provider-azure-servicelinker, gitea, terragrunt-fips, nemo,...

CVE-2026-39828 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector, gitea, nemo, flux-image-automation-controller, spire-server, helm, knative-serving-fips, kubescape-server-fips, cloudbeat, cilium, skaffold, kubescape, cilium-cli, k9s-fips, argocd-image-updater-fips, kubernetes, coder,...

CVE-2026-39827 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector, gitea, terragrunt-fips, nemo, flux-image-automation-controller, spire-server, gatus, helm, knative-serving-fips, terragrunt, trufflehog-fips, redpanda-console, gptscript, cloudbeat, cilium, kubescape-server-fips, mapotf, wal-g, skaffold...

CVE-2026-46597 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, ksops, terragrunt-fips, flux-image-automation-controller, crossplane-provider-aws-ecs, helm, crossplane-provider-aws-bedrockagent-fips, knative-serving-fips, terragrunt, crossplane-provider-aws-kinesis-fips,...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, ksops, terragrunt-fips, flux-image-automation-controller, crossplane-provider-aws-ecs, helm, crossplane-provider-aws-bedrockagent-fips, knative-serving-fips, terragrunt, crossplane-provider-aws-kinesis-fips,...

USN-8321-1: Papers vulnerability

It was discovered that Papers incorrectly handled PDF /GoToR actions. If a user were tricked into opening a specially crafted PDF file, an attacker could use this issue to manipulate command lines and possibly execute arbitrary code...

CVE-2026-46103

In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers...

CVE-2026-46102

In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skbhead leak in strpabortstrp When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp-skbhead. That skb is not...

CVE-2026-46101

In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nftbitwise Reject zero shift operands for nftbitwise left and right shift expressions during initialization. The carry propagation logic computes the carry from the adjacent 32-bit word using...