EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-3397)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels...

Unity Linux 20.1060e Security Update: containerd (UTSA-2026-106759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106759 advisory. spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled...

NewStart CGSL MAIN 7.02 : containerd Multiple Vulnerabilities (NS-SA-2026-0097)

The remote NewStart CGSL host, running version MAIN 7.02, has containerd packages installed that are affected by multiple vulnerabilities: - containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image...

Security update for hauler (moderate)

openSUSE security update: security update for hauler ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21793-1 Rating: moderate References: bsc1265425 bsc1276124 bsc1276651 bsc1277965 Cross-References: CVE-2026-37236 CVE-2026-41178 CVE-2026-41888...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: terraform-fips, kubevela, cilium, juicefs, k9s, flux-source-controller, rclone-fips, trivy-fips, chezmoi, flux, melange, prometheus-podman-exporter, splunk-otel-collector, external-secrets-operator, podman, grafana-alloy-fips, k3s, mapotf-fips, zarf, docker-cli-build...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: terraform-fips, kubevela, cilium, juicefs, k9s, flux-source-controller, rclone-fips, trivy-fips, chezmoi, flux, melange, prometheus-podman-exporter, splunk-otel-collector, external-secrets-operator, podman, grafana-alloy-fips, k3s, mapotf-fips, zarf, docker-cli-build...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: terraform-fips, kubevela, cilium, juicefs, k9s, flux-source-controller, rclone-fips, trivy-fips, chezmoi, flux, melange, prometheus-podman-exporter, splunk-otel-collector, external-secrets-operator, podman, grafana-alloy-fips, k3s, mapotf-fips, zarf, docker-cli-build...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: terraform-fips, kubevela, cilium, juicefs, k9s, flux-source-controller, rclone-fips, trivy-fips, chezmoi, flux, melange, prometheus-podman-exporter, splunk-otel-collector, external-secrets-operator, podman, grafana-alloy-fips, k3s, mapotf-fips, zarf, docker-cli-build...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: grype, kubescape, prometheus-operator, chezmoi, xeol, gh, opentelemetry-collector-contrib, gatus, terraform, witness, argo-workflows, nfpm, kine, cerbos, k3s, gomplate, splunk-otel-collector, gitness, trivy-operator, kubernetes, docker, trivy, wolfictl, flux,...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: grype, kubescape, prometheus-operator, chezmoi, xeol, gh, opentelemetry-collector-contrib, gatus, terraform, witness, argo-workflows, nfpm, kine, cerbos, k3s, gomplate, splunk-otel-collector, gitness, trivy-operator, kubernetes, docker, trivy, wolfictl, flux,...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: grype, kubescape, prometheus-operator, chezmoi, xeol, gh, opentelemetry-collector-contrib, gatus, terraform, witness, argo-workflows, nfpm, kine, cerbos, k3s, gomplate, splunk-otel-collector, gitness, trivy-operator, kubernetes, docker, trivy, wolfictl, flux,...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: grype, kubescape, prometheus-operator, chezmoi, xeol, gh, opentelemetry-collector-contrib, gatus, terraform, witness, argo-workflows, nfpm, kine, cerbos, k3s, gomplate, splunk-otel-collector, gitness, trivy-operator, kubernetes, docker, trivy, wolfictl, flux,...

PT-2026-89204

Name of the Vulnerable Software and Affected Versions containerd versions prior to 1.7.35 containerd versions prior to 2.0.12 containerd versions prior to 2.2.8 containerd versions prior to 2.3.5 Description On Linux systems with the CRI plugin enabled, a bug in the CRI ExecSync implementation ca...

OPENSUSE-SU-2026:21793-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: - update to 2.1.0 bsc1265425, CVE-2026-41888: v2.1.0 is a minor release built on the containerd- native foundation laid down in v2.0.0. The headline is that hauler store sync and hauler store add are now fully concurrent, with...

AZL-99279 CVE-2026-84304 affecting package moby-containerd-cc 1.7.7-17

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

GHSA-GJHQ-GJFW-99MQ vulnerabilities

Vulnerabilities for packages: minio, flux-source-controller, kubescape, prometheus-operator, external-dns, flux, chisel, gitea, aactl, kubernetes-dashboard, falco-no-driver, snyk-cli, rclone, telegraf, fscrypt, nerdctl, kubevela, loki, kyverno, cilium, kine, containerd, k9s, helm,...

Amazon Linux 2 : containerd, --advisory ALAS2ECS-2026-135 (ALASECS-2026-135)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-135 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracte...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ secti...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: kubevela, cilium, k9s, flux-source-controller, rclone-fips, flux, k3s, drone, gitea, prometheus, rclone, kubescape-server, kubernetes, loki, commercial-expanso-edge, tigera-operator, snyk-cli, kaf, gitness, kubevela-fips, kine, coder-fips, skaffold-fips, cg, chisel,...

GO-2026-6303 vulnerabilities

Vulnerabilities for packages: kubevela, cilium, k9s, flux-source-controller, rclone-fips, flux, k3s, drone, gitea, prometheus, rclone, kubescape-server, kubernetes, loki, commercial-expanso-edge, tigera-operator, snyk-cli, kaf, gitness, kubevela-fips, kine, coder-fips, skaffold-fips, cg, chisel,...