531 matches found
BuildKit: Custom frontend could bypass Seccomp/AppArmor
Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...
CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...
GHSA-PRG7-HCFM-MFCR vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2-fips, openstack-glance-2025.2, openstack-horizon-2025.1, datahub-ingestion-fips, openstack-horizon-2025.1-fips, openstack-nova-2025.2, openstack-horizon-2025.2, openstack-horizon-2026.1-fips, openstack-nova-2025.1,...
GHSA-HQVF-45JJ-MCCQ vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, terraform-provider-acme-fips, docker-compose-fips, buildkite-agent, crossplane-provider-aws-s3, k8s-image-swapper, chainloop-control-plane, k8sgpt, rabbitmq-cluster-operator-fips, crossplane-provider-aws-appstream, kube-fluentd-operator,...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: cue, cilium-cli, gh, kubernetes-ingress-defaultbackend, polaris, trino, buildah, docker-machine-driver-linode, dataplaneapi, mattermost, timestamp-authority, grafana-rollout-operator, vale, vt-cli, crane, chart-testing, esbuild, kserve-rest-proxy,...
GO-2026-6089 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, gitleaks, rabbitmq-cluster-operator-fips, buildkite-agent, crossplane-provider-aws-s3, k8s-image-swapper, k8sgpt, terraform-provider-acme-fips, vault-secrets-operator, crossplane-provider-aws-appstream, kube-fluentd-operator, zabbix-agent2,...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: spire-server, k3s, kots, k3d, kyverno, snyk-cli, k8s-device-plugin, nerdctl, containerd, aactl, zot...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: gitleaks, temporal-server, chainloop-control-plane, cadence-fips, terraform-provider-azuread-fips, crossplane-provider-aws-cognitoidentity-fips, chisel, hubble, ucd, local-path-provisioner-fips, cloudprober-fips, athenz-cert-manager-issuer-fips, eck-operator-fips,...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, terraform-provider-acme-fips, docker-compose-fips, buildkite-agent, crossplane-provider-aws-s3, k8s-image-swapper, chainloop-control-plane, k8sgpt, rabbitmq-cluster-operator-fips, crossplane-provider-aws-appstream, kube-fluentd-operator,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: gitleaks, temporal-server, chainloop-control-plane, cadence-fips, terraform-provider-azuread-fips, crossplane-provider-aws-cognitoidentity-fips, chisel, hubble, ucd, local-path-provisioner-fips, cloudprober-fips, athenz-cert-manager-issuer-fips, eck-operator-fips,...
CVE-2026-63308 vulnerabilities
Vulnerabilities for packages: helm...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...
GO-2025-3917 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...
GO-2023-2044 vulnerabilities
Vulnerabilities for packages: metrics-server...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2024-2932 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GO-2021-0356 vulnerabilities
Vulnerabilities for packages: k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid, kubeflow-fips, kubeflow, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips...