CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: nerdctl, splunk-otel-collector, runc, beats-fips, agentbeat, elastic-agent-fips, virt-handler-fips, kubescape, kubescape-server, gitaly-fips, cosmo-router-fips, witness, envoy-gateway, kubescape-server-fips, opentelemetry-ebpf-instrumentation-fips, nerdctl-fips,...

GHSA-QV9R-C865-CP47 vulnerabilities

Vulnerabilities for packages: druid, apache-pulsar, kafka-fips, strimzi-kafka-operator-fips, conductor, airbyte-server-fips, kayenta, nuxeo, traccar, airbyte-platform, airbyte-platform-fips, elasticsearch, traccar-fips, apache-hop, kafbat-ui, wavefront-proxy, wso2is, infinispan, apache-tika-fips,...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

EUVD-2026-58714

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766

CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...

CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

GO-2025-3690 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-operator-fips...

GO-2026-4841 vulnerabilities

Vulnerabilities for packages: milvus, k3s, rke2-runtime-fips...

GO-2025-3748 vulnerabilities

Vulnerabilities for packages: k3s, ipfs-cluster-fips...

GO-2022-0776 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2023-1850 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2024-2690 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2022-0623 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-5684 vulnerabilities

Vulnerabilities for packages: spegel, rke2-runtime, ipfs-cluster-fips, rke2-runtime-fips, spegel-fips, ipfs-cluster, k3s...

GO-2026-4351 vulnerabilities

Vulnerabilities for packages: flux-operator, flux-operator-fips...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-launcher, docker-machine-driver-harvester, virt-handler, virt-controller-fips...

GO-2022-0784 vulnerabilities

Vulnerabilities for packages: ctop...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: kubernetes, prometheus-podman-exporter, buildah, eks-distro, grafana-alloy-fips, grafana-alloy, podman, falco-no-driver, rancher, cluster-autoscaler, eks-distro-fips, cluster-autoscaler-fips, rke2-runtime, azure-container-networking, k3s, node-feature-discovery,...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: runc, gitness, localstack, gitlab-rails-ce, gendesk, k8s-device-plugin, etcd, cilium-envoy-fips, backup-restore-operator, etcd-fips, terraform, rke2-runtime, wuzz, rke2-runtime-fips, kube-conformance, k3s, fuse-overlayfs-snapshotter, aws-load-balancer-controller,...