GHSA-7JXH-36Q5-GCQV vulnerabilities

Vulnerabilities for packages: headlamp, kargo, skaffold, rancher-helm, spegel, kube-arangodb, trivy-operator, nerdctl, manifest-tool, syft, helm-operator, newrelic-infrastructure-agent, kubevela, kubescape-operator, docker, buildkitd, rancher-agent, k9s, dagger, fuse-overlayfs-snapshotter,...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: headlamp, kargo, skaffold, rancher-helm, spegel, kube-arangodb, trivy-operator, nerdctl, manifest-tool, syft, helm-operator, newrelic-infrastructure-agent, kubevela, kubescape-operator, docker, buildkitd, rancher-agent, k9s, dagger, fuse-overlayfs-snapshotter,...

CVE-2026-61712

A flaw was found in BuildKit. A remote attacker could provide a malicious base image or build with oversized /etc/passwd and /etc/group files. When BuildKit attempts to resolve usernames or group identifiers from these files, it reads them without an upper bound, leading to excessive memory...

GHSA-72X6-4J93-7W86 BuildKit has a possible runtime DoS via unbounded group parsing

Impact Maliciously crafted base image or build can cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory OOM kill of the buildkitd process. Patches Issue is fixed in BuildKit v0.31.1+ Workarounds Use trusted build...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, kubevela, k3s, caddy, up, metrics-server-fips, kube-oidc-proxy, kubernetes-fips, rancher-webhook-fips, rancher-webhook, buildkitd, kubernetes...

GO-2024-2494 vulnerabilities

Vulnerabilities for packages: kubescape, skaffold, docker, conftest, zot, scorecard, trivy, conftest-fips, kaniko, guac, buildkitd...

GO-2024-2493 vulnerabilities

Vulnerabilities for packages: kubescape, skaffold, docker, conftest, zot, scorecard, trivy, conftest-fips, kaniko, guac, buildkitd...

GO-2024-2497 vulnerabilities

Vulnerabilities for packages: kubescape, skaffold, docker, conftest, zot, scorecard, trivy, conftest-fips, kaniko, guac, buildkitd...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: kots, kubescape, skaffold, skopeo, k3s, wolfictl, podman, runc, zarf, newrelic-infrastructure-agent, cadvisor, k3d, trivy, kaniko, buildkitd, kubernetes, nerdctl, k9s, docker, ctop, syft, grype, zot...

GO-2024-2492 vulnerabilities

Vulnerabilities for packages: kubescape, skaffold, docker, conftest, zot, scorecard, trivy, conftest-fips, kaniko, guac, buildkitd...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, cert-manager-cmctl-fips, kubescape, gogatekeeper, opa-fips-envoy, docker-cli-buildx, xeol, k8ssandra-client-fips, tekton-pipelines-fips, cloudbeat-fips, fuse-overlayfs-snapshotter, gitlab-operator, steampipe, k9s,...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt, kube-mgmt-fips, kots, t...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: k3d, skaffold, nerdctl, skopeo, syft, newrelic-infrastructure-agent, docker, buildkitd, podman, k9s, kubernetes, grype, kaniko, trivy, ctop, k3s, kubescape, cadvisor, zot, runc, kots, zarf, wolfictl...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: caddy, kubevela, up, prometheus-adapter, buildkitd, kubernetes, k3s...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: k3d, skaffold, helm, newrelic-infrastructure-agent, kubevela, buildkitd, fuse-overlayfs-snapshotter, melange, grype, kaniko, helm-push, cilium-cli, trivy, up, ctop, k8sgpt, gitness, flux-helm-controller, kubescape, zot, flux-source-controller, eksctl, kots...

GO-2024-2494 vulnerabilities

Vulnerabilities for packages: kubescape, guac, docker, skaffold, trivy, zot, buildkitd, scorecard, kaniko, conftest...

GO-2024-2497 vulnerabilities

Vulnerabilities for packages: kubescape, guac, docker, skaffold, trivy, zot, buildkitd, scorecard, kaniko, conftest...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: skaffold, ko, trivy-operator, falcoctl, docker, sigstore-scaffolding, spire-server, buildkitd, policy-controller, neuvector-sigstore-interface, trivy, teleport, vexctl, cosign, kyverno-notation-aws, witness, gitsign, kubescape, goreleaser, zot, flux-source-controller...

GO-2024-2492 vulnerabilities

Vulnerabilities for packages: kubescape, guac, docker, skaffold, trivy, zot, buildkitd, scorecard, kaniko, conftest...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kine, kubescape, kubevela, temporal-server, metrics-server, volume-modifier-for-k8s, envoy-ratelimit, buildkitd, temporal, kubernetes, k3s, docker-compose, cri-tools...