15645 matches found
GO-2024-3311 vulnerabilities
Vulnerabilities for packages: pulumi, amazon-cloudwatch-agent-operator, promxy...
GO-2026-5856 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-nfs, crossplane, local-path-provisioner, nri-nginx, pulumi, terraform-provider-acme, stern, nri-consul, conftest, aws-node-termination-handler, pluto, grafana-alloy, nri-rabbitmq, ytt, octo-sts, chisel, aws-load-balancer-controller, dask-gateway...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-rds, sftpgo-plugin-eventstore, rekor, timoni, envoy-gateway, crossplane, local-path-provisioner, kuberay-operator, crossplane-provider-aws-sqs, croc, terraform-provider-acme, external-secrets-operator, libnvidia-container, nri-consul, conftest...
GO-2026-5038 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-rds, timoni, envoy-gateway, crossplane, local-path-provisioner, kuberay-operator, crossplane-provider-aws-sqs, external-secrets-operator, libnvidia-container, aws-node-termination-handler, prometheus-adapter, flyte, volume-modifier-for-k8s,...
GO-2023-1754 vulnerabilities
Vulnerabilities for packages: apko, aactl, ko...
GO-2023-1988 vulnerabilities
Vulnerabilities for packages: tkn, dex, timoni, pulumi, kaf, nodetaint, prometheus-adapter, bom, aactl, hugo, git-lfs, aws-load-balancer-controller, flux, src, pulumi-kubernetes-operator, crossplane-provider-aws, yq, prometheus-operator, gke-gcloud-auth-plugin, dynamic-localpv-provisioner,...
GO-2026-4354 vulnerabilities
Vulnerabilities for packages: tkn, trivy-operator, cosign, spire-server, witness, ko, gitsign, buildkitd, tflint, gh, trivy, falcoctl, aactl, vexctl, kubescape, tekton-chains, zarf, ratify, goreleaser, kyverno-notation-aws, skaffold, neuvector-sigstore-interface, policy-controller, teleport,...
GO-2025-3563 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-nfs, fq, crossplane, local-path-provisioner, nri-nginx, minio-operator, terraform-provider-acme, cert-manager-istio-csr, nri-consul, conftest, pluto, nri-memcached, nri-rabbitmq, ytt, mkcert, octo-sts, wait-for-port, sonobuoy,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: tkn, kubernetes-csi-driver-nfs, dex, ipfs-cluster, nri-nginx, clickhouse-operator, rabbitmq-default-user-credential-updater, libnvidia-container, nri-consul, conftest, kubernetes-csi-driver-hostpath, nodetaint, kor, pluto, wire-go, nri-memcached, nri-haproxy, bom,...
GO-2025-3595 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-nfs, fq, crossplane, local-path-provisioner, pulumi, minio-operator, terraform-provider-acme, cert-manager-istio-csr, gitsign, pluto, trufflehog, grafana-alloy, mkcert, octo-sts, aws-load-balancer-controller, sonobuoy, gitea, k8ssandra-client,...
GO-2024-3106 vulnerabilities
Vulnerabilities for packages: fq, nvidia-container-toolkit, crossplane, local-path-provisioner, nri-nginx, pulumi, minio-operator, stern, nri-consul, gitsign, conftest, pluto, nri-memcached, grafana-alloy, nri-rabbitmq, ytt, mkcert, octo-sts, aws-load-balancer-controller, dask-gateway, sonobuoy,...
GO-2024-3250 vulnerabilities
Vulnerabilities for packages: tkn, docker, opentelemetry-collector-contrib, weaviate, kubernetes, crossplane, guac, cosign, temporal, minio-operator, crossplane-provider-family-azure, ko, bank-vaults, temporal-server, gitsign, k3s, argo-events, kine, rclone, scorecard, flyte,...
GO-2024-2719 vulnerabilities
Vulnerabilities for packages: tkn, wolfictl, spire-server, ko, gitsign, falcoctl, aactl, melange, vexctl, kubescape, tekton-chains, zarf, apko, goreleaser, skaffold, neuvector-sigstore-interface, policy-controller, slsa-verifier, flux-source-controller, zot...
USN-8529-2 linux-azure, linux-gcp, linux-hwe, linux-oracle vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...
USN-8529-2: Linux kernel vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...
USN-8548-2 linux, linux-aws, linux-kvm vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...
USN-8548-2: Linux kernel vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...
USN-8530-2: Linux kernel (HWE) vulnerabilities
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...
USN-8530-2 linux-aws-hwe vulnerabilities
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...