GO-2025-4223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: buildah, skopeo, trivy, zot, grafana, aws-otel-collector, ko, podman, kots, datadog-agent, spire-server, nuclei, trivy-operator, cri-tools, amazon-cloudwatch-agent-operator, rancher, docker-credential-gcr, undock, kpt, rancher-machine, nerdctl, opentelemetry-operator...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: buildah, skopeo, trivy, zot, grafana, aws-otel-collector, ko, podman, kots, datadog-agent, spire-server, nuclei, trivy-operator, cri-tools, amazon-cloudwatch-agent-operator, rancher, docker-credential-gcr, undock, kpt, osv-scanner, rancher-machine, nerdctl,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: cosign, gh, trivy, zot, falcoctl, ko, buildkitd, neuvector-sigstore-interface, policy-controller, zarf, spire-server, teleport, aactl, trivy-operator, kyverno-notation-aws, vexctl, ratify, gitsign, tkn, skaffold, tekton-chains, witness, flux-source-controller, tflint...

CVE-2026-73419 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

SUSE CVE-2026-63295

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges such as enforcing restricted.containers.privilege=isolated, LXD fails to enforce the...

CLEANSTART-2026-ES11075 Security fixes in argo-events 1.9.10-r1

Package argo-events version 1.9.10-r1 fixes 17 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-33186, ghsa-mh2q-q3fh-2475, CVE-2026-29181...

CLEANSTART-2026-IF32046 Security fixes in local-static-provisioner 2.6.0-r1

Package local-static-provisioner version 2.6.0-r1 fixes 18 vulnerabilities: ghsa-7fxm-f474-hf8w, ghsa-q78c-gwqw-jcmc, CVE-2023-3676, CVE-2023-3955, ghsa-hq6q-c2x6-hmch...

Linux Distros Unpatched Vulnerability : CVE-2026-19730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt...

RHSA-2026:51036 Red Hat Security Advisory: OpenShift Container Platform 4.22.9 packages and security update

Bulletin has no description...

CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-62775 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability

...

PT-2026-75898

Name of the Vulnerable Software and Affected Versions Incus versions prior to 7.3.0 Description Project-level enforcement of restricted.containers.privilege=isolated can be bypassed, allowing a user to create a non-isolated container in a project configured to forbid them. The restriction only...

Linux Distros Unpatched Vulnerability : CVE-2026-18107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critica...

EUVD-2026-49986

A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...

CVE-2026-15809

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

CVE-2026-15809

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

RHEL 10 : podman (RHSA-2026:37072)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:37072 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

Important: oci-seccomp-bpf-hook security update

OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fixes: net: golang: Go net package: Denial of Service via long CNAME response in...

EUVD-2026-40859

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and 1.5.0-rc.1, when setting up the container rootfs, setupPtmx and setupDevSymlinks call os.Remove and os.Symlink with a filepath.Join strin...