GO-2025-3849 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, crossplane-provider-azure-managedidentity, kube-metrics-adapter-fips, sftpgo-plugin-kms, terraform-provider-azapi-fips, nemo, falco-exporter, sftpgo-plugin-eventsearch, packer, cluster-api-gcp-controller, tigera-operator, kubelet-csr-approver,...

GO-2024-3105 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, crossplane-provider-azure-managedidentity, nri-kubernetes, protoc-gen-go-grpc, sops, cert-manager-webhook-pdns, prometheus-nats-exporter, k8sgpt-operator, crossplane-provider-aws-eks, crossplane-provider-aws-sqs, tigera-operator, dockerize-fip...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-2617 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-4841 vulnerabilities

Vulnerabilities for packages: k3s...

GO-2023-1785 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2026-5046 vulnerabilities

Vulnerabilities for packages: dapr...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, docker-machine-driver-harvester, rancher-system-agent, mesosphere-vsphere-csi, kubernetes-csi-driver-hostpath, rancher-fleet, emissary, yunikorn-k8shim, vcluster...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: grafana-mimir, dask-gateway, crossplane, gcp-compute-persistent-disk-csi-driver, argo-rollouts, controller-gen, mariadb-operator, kuma, cluster-api, minio-object-browser, croc, tigera-operator, otel-cli, kserve-modelmesh-serving, nri-nginx,...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: dask-gateway, crossplane-provider-aws-memorydb, crossplane, dgraph, argo-rollouts, nri-prometheus, k9s, cluster-api, vault-k8s, stakater-reloader, rancher-webhook, cert-manager-webhook-pdns, tigera-operator, karpenter, crossplane-provider-azure-managedidentity,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: dgraph, gomplate, hugo, kubewatch, nri-prometheus, vault-k8s, stakater-reloader, bank-vaults, k3d, kubernetes-csi-livenessprobe, k8sgpt-operator, kube-fluentd-operator, sigstore-scaffolding, flux-helm-controller, grpcurl, trillian, hey, dive, frp, kaf,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: grafana-mimir, crossplane, direnv, velero-plugin-for-microsoft-azure, helm-operator, controller-gen, gobump, croc, kserve-modelmesh-serving, nri-nginx, kubernetes-csi-livenessprobe, fluent-operator, terraform-provider-random, actions-runner-controller,...

GO-2024-3106 vulnerabilities

Vulnerabilities for packages: grafana-mimir, dask-gateway, terraform-docs, crossplane, direnv, configmap-reload, helm-operator, controller-gen, gobump, nri-prometheus, croc, kafka-proxy, kserve-modelmesh-serving, nri-nginx, kubernetes-csi-livenessprobe, fluent-operator, actions-runner-controller,...

CLEANSTART-2026-WX78037 Security fixes in kubernetes-dns-node-cache 1.26.8-r6

Package kubernetes-dns-node-cache version 1.26.8-r6 fixes 2 vulnerabilities: CVE-2026-50274, ghsa-74j5-xf3v-crq8...

PT-2026-71326

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

CVE-2026-32677 concerns a path traversal vulnerability in gaudi-container-runtime prior to version 1.24.0 within Ring 3: User Applications. The root cause is a path traversal issue that could allow an unprivileged, authenticated user with low attack complexity and passive user interaction to esca...

EUVD-2026-56528

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...