CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: containerd, rke2-runtime, agentbeat-fips, cilium, nerdctl-fips, kuma, virt-handler, kubescape-operator, docker-fips, elastic-agent, prometheus, envoy-gateway-fips, nerdctl, hubble, docker, cilium-fips, milvus, kubescape-operator-fips, kubescape-server,...

GHSA-QV9R-C865-CP47 vulnerabilities

Vulnerabilities for packages: akhq, celeborn, wildfly, opensearch, wso2is, zipkin, kafka-bridge, airbyte-platform-fips, apache-activemq-artemis, conductor-fips, kafbat-ui-fips, kayenta-fips, spark, trino, nacos-docker, keycloak-config-cli, apache-pulsar, kafka-fips, thingsboard, wavefront-proxy,...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

EUVD-2026-58714

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766

CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

GO-2025-3690 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-operator-fips...

GO-2026-4841 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, milvus, k3s...

GO-2026-5684 vulnerabilities

Vulnerabilities for packages: rke2-runtime, spegel, ipfs-cluster, rke2-runtime-fips, ipfs-cluster-fips, spegel-fips, k3s...

GO-2022-0776 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-3748 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

GO-2022-0623 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2023-1850 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2024-2690 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-4351 vulnerabilities

Vulnerabilities for packages: flux-operator, flux-operator-fips...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, virt-controller-fips, virt-handler, virt-launcher, virt-operator-fips...

GO-2022-0784 vulnerabilities

Vulnerabilities for packages: ctop...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: rke2-runtime, aws-load-balancer-controller, gitness, backup-restore-operator, kube-conformance, runc, terraform, etcd, localstack, rke2-runtime-fips, cilium-envoy, k3s, cilium-envoy-fips, gitlab-rails-ce, etcd-fips, fuse-overlayfs-snapshotter, k8s-device-plugin,...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: falco-no-driver, rke2-runtime, cluster-autoscaler, podman, sriov-network-device-plugin, rancher, kubernetes, rancher-agent, cluster-autoscaler-fips, grafana-alloy-fips, grafana-alloy, kubernetes-fips, buildah, azure-container-networking, eks-distro,...