CVE-2026-41185 ServiceAccount token disclosure via Azure IPAM CNI plugin logs

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

CVE-2026-41185

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

CVE-2026-41185 ServiceAccount token disclosure via Azure IPAM CNI plugin logs

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

EUVD-2026-32933

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

CVE-2026-41185 ServiceAccount token disclosure via Azure IPAM CNI plugin logs

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

Tigera Calico 安全漏洞

Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workloads. Tigera Calico has a security vulnerability, which stems from the Azure IPAM plugin recording unencrypted configuration mappings in logs...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, timestamp-authority, kube-bench, kubernetes-csi-external-provisioner, litestream, harbor-scanner-trivy, kor, whereabouts, external-secrets-operator, prometheus-alertmanager, argo-rollouts, ytt, crane, flux-notification-controller,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, linkerd2, timestamp-authority, kube-bench, kubernetes-csi-external-provisioner, litestream, harbor-scanner-trivy, kor, whereabouts, external-secrets-operator, prometheus-alertmanager, argo-rollouts, ytt, crane, flux-notification-controller,...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, docker-fips, kuma, rootlesskit, rke2-runtime, k3s, istio-fips, calico, containerd-fips, containerd, nerdctl, azure-ipam, podman, buildkitd-fips, docker, calico-fips, nerdctl-fips, istio, buildkitd, buildah, rootlesskit-fips, flannel,...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, docker-fips, kuma, rootlesskit, rke2-runtime, k3s, istio-fips, calico, containerd-fips, containerd, nerdctl, azure-ipam, podman, buildkitd-fips, docker, calico-fips, nerdctl-fips, istio, buildkitd, buildah, rootlesskit-fips, flannel,...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: multus-cni, datadog-agent, calico, buildkitd, containerd, k3s, nerdctl, buildah, kuma, podman, istio, rootlesskit, docker, flannel, azure-ipam...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: multus-cni, datadog-agent, calico, buildkitd, containerd, k3s, nerdctl, buildah, kuma, podman, istio, rootlesskit, docker, flannel, azure-ipam...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, timestamp-authority, kube-bench, fluent-bit-plugin-loki, conjur-cli, whereabouts, prometheus-alertmanager, argo-rollouts, ytt, yunikorn-web, crane, terraform-provider-sendgrid, atlantis, k8sgateway, amass, kustomize, wire-go, gobump, guac,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli, dask-gateway,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gostatsd, gotestsum, pguser, harbor-registry, cfssl, helm-docs, k3d, timestamp-authority, kube-bench, kubernetes-csi-external-attacher, wait-for-port, cert-exporter, spqr, litefs, restic, sigstore-scaffolding, age, otel-cli,...