142 matches found
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: kube-vip, cni-plugins...
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: kube-vip, cni-plugins, cni-plugins-fips, kube-vip-fips, amazon-k8s-cni-fips...
GO-2024-2598 vulnerabilities
Vulnerabilities for packages: k3d, newrelic-infra-operator, kor, vertical-pod-autoscaler, k8sgpt-operator, nri-apache, kpt, helm, amass, kustomize, docker-credential-acr-env, govulncheck, kube-state-metrics, go-bindata, vite, kubebuilder, tailscale, regclient, buildkitd, kubernetes-dns-node-cache...
GO-2024-2599 vulnerabilities
Vulnerabilities for packages: k3d, newrelic-infra-operator, kor, vertical-pod-autoscaler, k8sgpt-operator, nri-apache, kpt, helm, amass, kustomize, docker-credential-acr-env, govulncheck, kube-state-metrics, go-bindata, vite, kubebuilder, tailscale, regclient, buildkitd, kubernetes-dns-node-cache...
GO-2026-4984 vulnerabilities
Vulnerabilities for packages: k3d, pgtimetable, gostatsd, nri-apache, istio, crossplane, harbor, mesosphere-vsphere-csi, kpt, helm, kubo, buildah, rabbitmq-default-user-credential-updater, cert-manager-csi-driver, tw, govulncheck, fluent-bit-plugin-loki, apko, gatekeeper, otel-cli, go, regclient,...
GO-2023-2382 vulnerabilities
Vulnerabilities for packages: k3d, gops, vertical-pod-autoscaler, kubeflow-katib, cni-plugins, helm-push, oras, scorecard, sops, gosu, amass, petname, docker-cli, go-bindata, hubble-ui, protoc-gen-go-grpc, aws-flb-kinesis, aws-flb-cloudwatch, render-template, wait-for-port, gobuster,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: k3d, kor, nri-apache, kpt, kubernetes-csi-driver-hostpath, rabbitmq-default-user-credential-updater, timescaledb-tune, docker-cli-buildx, regclient, buildkitd, gptscript, zot, dgraph, nri-haproxy, gobump, falcoctl, opentofu, envconsul, thanos-operator, spark-operator...
CLEANSTART-2026-IL06995 Security fixes in cni-plugins-fips 1.8.0-r0
Package cni-plugins-fips version 1.8.0-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...
CLEANSTART-2026-OZ77576 Security fixes in cni-plugins 1.9.0-r0
Package cni-plugins version 1.9.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
Important: cni-plugins
Issue Overview: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Affected Packages: cni-plugins Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...
Amazon Linux 2023 : cni-plugins (ALAS2023-2026-1888)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1888 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Tenable has extracted the preceding description block directly from the tested product...
Amazon Linux 2 : cni-plugins, --advisory ALAS2-2026-3386 (ALAS-2026-3386)
The version of cni-plugins installed on the remote host is prior to 1.7.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3386 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Tenable has...
Amazon Linux 2023 : cni-plugins (ALAS2023-2026-1723)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1723 advisory. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value refresh. A new GODEBU...
Amazon Linux 2 : cni-plugins, --advisory ALAS2-2026-3311 (ALAS-2026-3311)
The version of cni-plugins installed on the remote host is prior to 1.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3311 advisory. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta...
Important: cni-plugins
Issue Overview: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escapi...
Important: cni-plugins
Issue Overview: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escapi...