CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: kubescape-operator, cilium, opentelemetry-ebpf-instrumentation, agentbeat-fips, vitess, beats, ctop-fips, beats-fips, elastic-agent-fips, hubble-fips, kubescape-server-fips, docker-fips, nerdctl, docker, witness, envoy-gateway-fips, hubble,...

GHSA-QV9R-C865-CP47 vulnerabilities

Vulnerabilities for packages: apache-hop, apache-pulsar-fips, traccar-fips, apache-pulsar, wso2is, opensearch, zaproxy, apache-activemq-artemis, kayenta, spdx-tools-java, apache-hop-fips, strimzi-kafka-operator, kafka, pinot-fips, cruise-control, airbyte-platform-fips, kafka-bridge-fips,...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

EUVD-2026-58714

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766

CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...

CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

GO-2025-3690 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-operator-fips...

GO-2026-4841 vulnerabilities

Vulnerabilities for packages: milvus, rke2-runtime-fips, k3s...

GO-2025-3748 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

GO-2024-2690 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-5684 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, k3s, spegel, spegel-fips, ipfs-cluster, ipfs-cluster-fips, rke2-runtime...

GO-2022-0623 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2023-1850 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2022-0776 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-4351 vulnerabilities

Vulnerabilities for packages: flux-operator, flux-operator-fips...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: virt-launcher, docker-machine-driver-harvester, virt-handler, virt-controller-fips, virt-operator-fips...

GO-2022-0784 vulnerabilities

Vulnerabilities for packages: ctop...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: wuzz, terraform, cilium-envoy-fips, cilium-envoy, aws-load-balancer-controller, localstack, gitlab-rails-ce, kube-conformance, rke2-runtime, gendesk, etcd, fuse-overlayfs-snapshotter, rke2-runtime-fips, gitness, k8s-device-plugin, k3s, runc, backup-restore-operator,...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, prometheus-podman-exporter, ctop-fips, node-feature-discovery, sriov-network-device-plugin-fips, grafana-alloy, nvidia-container-toolkit, azure-container-networking, rke2-runtime, falco-no-driver, eks-distro-fips, rancher, sriov-network-device-plugin...