GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, fscrypt, coder, knative-serving, kube-state-metrics, kyverno-fips, drone, snyk-cli, k9s-fips, k9s, kube-arangodb-fips, vitess, argo-cd, gitea, kubernetes-dashboard, chisel-fips, opentelemetry-collector, knative-serving-fips, kots, spire-server,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, fscrypt, knative-serving, kube-state-metrics, kyverno-fips, snyk-cli, kube-arangodb-fips, vitess, argo-cd, kubernetes-dashboard, opentelemetry-collector, knative-serving-fips, kots, spire-server, gatekeeper-fips, buildah, cilium, mattermost-fips,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, fscrypt, grype-db, juicefs, knative-serving, kube-state-metrics, pulumi-language-dotnet, kyverno-fips, snyk-cli, k9s-fips, k9s, kube-arangodb-fips, vitess, argo-cd, gitea, kubernetes-dashboard, step, opentelemetry-collector, knative-serving-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, fscrypt, coder, grype-db, juicefs, knative-serving, longhorn-cli-fips, kube-state-metrics, pulumi-language-dotnet, kyverno-fips, drone, snyk-cli, k9s-fips, k9s, kube-arangodb-fips, vitess, argo-cd, gitea, kubernetes-dashboard, chisel-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: trivy, zarf, wal-g, tekton-chains, external-dns, nfpm, step-issuer, rancher, spire-server, k8sgpt, kine, crossplane-provider-azure-authorization, dagger, fulcio, vault-benchmark, flux-image-automation-controller, wolfictl, podman, pulumi, melange, zot,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy, zarf, chisel, argocd-image-updater, gitlab-kas, containerd, external-dns, kubernetes, minio, cilium, rancher, spire-server, k3s, gitea, trivy-operator, cilium-cli, kine, knative-serving, helm, flux-image-automation-controller, istio, prometheus, osv-scanner,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: trivy, zarf, chisel, argocd-image-updater, gitlab-kas, containerd, external-dns, kubernetes, minio, cilium, rancher, spire-server, k3s, gitea, trivy-operator, cilium-cli, kine, knative-serving, helm, flux-image-automation-controller, istio, prometheus, osv-scanner,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: trivy, zarf, external-dns, nfpm, step-issuer, rancher, spire-server, kine, dagger, flux-image-automation-controller, wolfictl, podman, pulumi, melange, zot, argocd-image-updater, gomplate, gitea, trivy-operator, cilium-cli, scorecard, go-discover,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: trivy, guac, zarf, nuclei, argocd-image-updater, gitlab-kas, containerd, gomplate, external-dns, kubernetes, splunk-otel-collector, minio, nfpm, cilium, spire-server, k3s, opentofu, gitea, trivy-operator, cilium-cli, kine, knative-serving, dagger, helm, witness,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: gitlab-kas, docker-cli-buildx, containerd, external-dns, kubernetes, minio, cilium, rancher, spire-server, k3s, cilium-cli, kine, knative-serving, helm, istio, prometheus, kaf, kyverno, loki, podman, telegraf, snyk-cli, zot, kots, cert-manager, fscrypt,...

OPENSUSE-SU-2026:21072-1 Security update for trivy

This update for trivy fixes the following issues Update to version 0.71.2: - CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite loops, panics or resource consumption bsc1267268. - CVE-2026-46680:...

Security update for containerd

This update for containerd fixes the following issues CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260296. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZ...

ROS-20260626-73-0016

The vulnerability in containerd is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Ubuntu 25.10 / 26.04 LTS : containerd-stable vulnerabilities (USN-8473-1)

The remote Ubuntu 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8473-1 advisory. It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could possibly use this issue to cause containerd...

SUSE SLES12 Security Update : containerd (SUSE-SU-2026:2640-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2640-1 advisory. This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:2639-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2639-1 advisory. This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : containerd vulnerabilities (USN-8471-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8471-1 advisory. It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attack...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : containerd vulnerabilities (USN-8472-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8472-1 advisory. It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could possibl...

GO-2026-5758 containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

containerd CRI — image-config LABEL flows to restart-monitor binary:// logger: host-root command execution from an image pull in github.com/containerd/containerd...

GO-2026-5622 Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd...