GO-2026-6238 vulnerabilities

Vulnerabilities for packages: envoy-gateway, nerdctl-fips, kubescape-operator-fips, nerdctl, hubble-ui, rke2-runtime, delve, opentelemetry-ebpf-instrumentation, witness, milvus, agentbeat, hubble-ui-backend-fips, envoy-gateway-fips, kubescape-server, vitess, containerd-fips, falcoctl-fips,...

BuildKit has a possible runtime DoS via unbounded group parsing

Impact Maliciously crafted base image or build can cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory OOM kill of the buildkitd process. Patches Issue is fixed in BuildKit v0.31.1+ Workarounds Use trusted build...

ROS-20260819-73-0045

The vulnerability in containerd is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: hubble-ui, k3s, nerdctl, vitess, delve, kubescape, docker, gitaly, witness, cilium, hubble, kubescape-operator, splunk-otel-collector, kuma, falcoctl, containerd...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: hubble-ui, k3s, nerdctl, vitess, delve, kubescape, docker, gitaly, witness, cilium, hubble, kubescape-operator, splunk-otel-collector, kuma, falcoctl, containerd...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-2063)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2063 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...

Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2026-117 (ALASNITRO-ENCLAVES-2026-117)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-117 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable h...

Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2026-139 (ALASDOCKER-2026-139)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-139 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: envoy-gateway, nerdctl-fips, kubescape-operator-fips, nerdctl, hubble-ui, rke2-runtime, delve, opentelemetry-ebpf-instrumentation, witness, milvus, agentbeat, hubble-ui-backend-fips, envoy-gateway-fips, kubescape-server, vitess, containerd-fips, falcoctl-fips,...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: envoy-gateway, nerdctl-fips, kubescape-operator-fips, nerdctl, hubble-ui, rke2-runtime, delve, opentelemetry-ebpf-instrumentation, witness, milvus, agentbeat, hubble-ui-backend-fips, envoy-gateway-fips, kubescape-server, vitess, containerd-fips, falcoctl-fips,...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Issue Correction: Run dnf update containerd --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2063 --releasever 2023.12.202608...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and thi...

GO-2025-3646 vulnerabilities

Vulnerabilities for packages: rke2-runtime, k3s, rke2-runtime-fips...

GO-2025-3748 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

GO-2025-3391 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GO-2024-2771 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: vault-fips, commercial-expanso-edge, vault, frankenphp-8.5, rke2-runtime, frankenphp-8.4, mattermost, datadog-agent, commercial-grafana, beats-fips, kine, elastic-agent, rke2-runtime-fips, beats, frankenphp-8.3, elastic-agent-fips, grafana-fips, loki, cloudbeat,...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines-driver-fips, kubeflow-pipelines, kubeflow-pipelines-fips, argo-workflows-fips...

GO-2025-4240 vulnerabilities

Vulnerabilities for packages: longhorn-share-manager, volcano, calico-fips, nodetaint, kapp-fips, cephcsi-fips, docker-machine-driver-harvester, azuredisk-csi-fips, argo-cd-fips, kots, blob-csi, longhorn-manager, kubernetes-dns-node-cache, vcluster, local-static-provisioner, azuredisk-csi,...