CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: containerd, skaffold, loki, kubevela, telegraf, minio, rancher-agent, spire-server, cilium, kaf, kyverno, gitea, external-dns, kubernetes, kubescape, opentelemetry-collector, flux-image-automation-controller, aactl, snyk-cli, k9s, nerdctl, flux-source-controller, kin...

GO-2026-6303 vulnerabilities

Vulnerabilities for packages: containerd, skaffold, loki, kubevela, telegraf, minio, rancher-agent, spire-server, cilium, kaf, kyverno, gitea, external-dns, kubernetes, kubescape, opentelemetry-collector, flux-image-automation-controller, aactl, snyk-cli, k9s, nerdctl, flux-source-controller, kin...

AZL-98385 CVE-2026-37236 affecting package moby-containerd-cc for versions less than 1.7.7-17

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:3783-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3783-1 advisory. This update for containerd rebuilds it against the current go security release. Tenable has extracted the preceding...

GO-2026-6278 vulnerabilities

Vulnerabilities for packages: cloudflared, redis-operator-fips, milvus, amazon-cloudwatch-agent-fips, kube-conformance, jitsucom-bulker, virt-api-fips, etcd-fips, amazon-ssm-agent-fips, aws-node-termination-handler, kubevela, loki, prometheus-fips, plutono-fips, amazon-cloudwatch-agent,...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: delve, witness, milvus, nerdctl-fips, gitaly-fips, splunk-otel-collector-fips, splunk-otel-collector, hubble-fips, kubescape-operator, kubescape-operator-fips, falcoctl-fips, cosmo-router, kubescape-server, hubble-ui-backend-fips, virt-handler, hubble-ui,...

PT-2026-79115

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0...

ROS-20260820-73-0009

The vulnerability in containerd is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...

BuildKit has a possible runtime DoS via unbounded group parsing

Impact Maliciously crafted base image or build can cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory OOM kill of the buildkitd process. Patches Issue is fixed in BuildKit v0.31.1+ Workarounds Use trusted build...

ROS-20260819-73-0045

The vulnerability in containerd is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, docker, kubescape, falcoctl, kuma, runc, splunk-otel-collector, k3s, witness, gitaly, delve, kubescape-operator, cilium, hubble-ui, hubble, vitess...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, docker, kubescape, falcoctl, kuma, runc, splunk-otel-collector, k3s, witness, gitaly, delve, kubescape-operator, cilium, hubble-ui, hubble, vitess...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-2063)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2063 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...

Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2026-117 (ALASNITRO-ENCLAVES-2026-117)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-117 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable h...

Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2026-139 (ALASDOCKER-2026-139)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-139 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: delve, witness, milvus, nerdctl-fips, gitaly-fips, splunk-otel-collector-fips, splunk-otel-collector, hubble-fips, kubescape-operator, kubescape-operator-fips, falcoctl-fips, cosmo-router, kubescape-server, hubble-ui-backend-fips, virt-handler, hubble-ui,...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: delve, witness, milvus, nerdctl-fips, gitaly-fips, splunk-otel-collector-fips, splunk-otel-collector, hubble-fips, kubescape-operator, kubescape-operator-fips, falcoctl-fips, cosmo-router, kubescape-server, hubble-ui-backend-fips, virt-handler, hubble-ui,...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Issue Correction: Run dnf update containerd --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2063 --releasever 2023.12.202608...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100512)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100512 advisory. In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroupwritebackumount and inodeswitchwbs When a container exits, the...