77 matches found
GO-2026-6597 vulnerabilities
Vulnerabilities for packages: eksctl, grype, k8sgpt, syft, spegel, kubescape, docker, xeol, trivy, gatekeeper, wolfictl, chartmuseum, scorecard, helm-operator, fuse-overlayfs-snapshotter, zarf, tigera-operator, falco-no-driver, dagger, helm-push, manifest-tool, rancher-helm, kaniko, steampipe,...
CLEANSTART-2026-UF45412 Reader
Security vulnerability affects the buildkitd package. The Reader...
CLEANSTART-2026-LO15430 tar
Security vulnerability affects the buildkitd package. tar...
CLEANSTART-2026-CX75671 Cancelling a query (e
Security vulnerability affects the buildkitd package. Cancelling a query e...
GHSA-7JXH-36Q5-GCQV vulnerabilities
Vulnerabilities for packages: eksctl, grype, k8sgpt, syft, spegel, datadog-agent, kubescape, docker, xeol, trivy, gatekeeper, wolfictl, chartmuseum, scorecard, helm-operator, fuse-overlayfs-snapshotter, zarf, tigera-operator, dagger, helm-push, manifest-tool, rancher-helm, kaniko, steampipe,...
CVE-2026-53495 vulnerabilities
Vulnerabilities for packages: eksctl, grype, k8sgpt, syft, spegel, datadog-agent, kubescape, docker, xeol, trivy, gatekeeper, wolfictl, chartmuseum, scorecard, helm-operator, fuse-overlayfs-snapshotter, zarf, tigera-operator, dagger, helm-push, manifest-tool, rancher-helm, kaniko, steampipe,...
CVE-2026-61712
A flaw was found in BuildKit. A remote attacker could provide a malicious base image or build with oversized /etc/passwd and /etc/group files. When BuildKit attempts to resolve usernames or group identifiers from these files, it reads them without an upper bound, leading to excessive memory...
GHSA-72X6-4J93-7W86 BuildKit has a possible runtime DoS via unbounded group parsing
Impact Maliciously crafted base image or build can cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory OOM kill of the buildkitd process. Patches Issue is fixed in BuildKit v0.31.1+ Workarounds Use trusted build...
GO-2023-2113 vulnerabilities
Vulnerabilities for packages: kubevela, buildkitd, prometheus-adapter, kubernetes-fips, caddy, metrics-server-fips, kubernetes, rancher-webhook, rancher-webhook-fips, k3s, kube-oidc-proxy, up...
GO-2024-2494 vulnerabilities
Vulnerabilities for packages: kubescape, conftest-fips, guac, zot, conftest, docker, buildkitd, kaniko, scorecard, trivy, skaffold...
GO-2024-2493 vulnerabilities
Vulnerabilities for packages: kubescape, conftest-fips, guac, zot, conftest, docker, buildkitd, kaniko, scorecard, trivy, skaffold...
GO-2024-2492 vulnerabilities
Vulnerabilities for packages: kubescape, conftest-fips, guac, zot, conftest, docker, buildkitd, kaniko, scorecard, trivy, skaffold...
GO-2024-2497 vulnerabilities
Vulnerabilities for packages: kubescape, conftest-fips, guac, zot, conftest, docker, buildkitd, kaniko, scorecard, trivy, skaffold...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: grype, syft, k9s, skaffold, nerdctl, docker, runc, podman, kaniko, newrelic-infrastructure-agent, ctop, k3s, zarf, cadvisor, k3d, kubescape, zot, buildkitd, kots, skopeo, trivy, kubernetes, wolfictl...
GO-2025-4108 vulnerabilities
Vulnerabilities for packages: kubevela, cert-manager-cmctl, chartmuseum, cluster-api-helm-controller, k9s, flux-source-controller, trivy-fips, kubescape-operator, melange, kube-arangodb, google-osconfig-agent, docker-compose, ctop, k3s, amazon-ecs-agent-fips, zarf, k8ssandra-client-fips,...
GO-2026-5758 vulnerabilities
Vulnerabilities for packages: kubevela, chartmuseum, cluster-api-helm-controller, k9s, chaos-mesh-fips, linkerd2-fips, trivy-fips, kubescape-operator, kube-arangodb, google-osconfig-agent, docker-compose, ctop, docker-compose-fips, crossplane-fips, k3s, amazon-ecs-agent-fips, zarf,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: grype, syft, kubescape, docker, podman, trivy, wolfictl, zarf, ctop, k3d, kaniko, nerdctl, cadvisor, k9s, skaffold, buildkitd, k3s, newrelic-infrastructure-agent, runc, zot, kots, skopeo, kubernetes...
GO-2026-4377 vulnerabilities
Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, docker, trivy, ko, gh, gitsign, kyverno-notation-aws, tflint, zarf, witness, neuvector-sigstore-interface, tekton-chains, sigstore-scaffolding, policy-controller, vexctl, skaffold, buildkitd, falcoctl,...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: eksctl, grype, k8sgpt, flux-source-controller, kubescape, melange, trivy, up, flux-helm-controller, fuse-overlayfs-snapshotter, ctop, helm-push, k3d, kaniko, kubevela, cilium-cli, helm, skaffold, buildkitd, newrelic-infrastructure-agent, gitness, zot, kots...